Linux server.nvwebsoft.co.in 3.10.0-1160.114.2.el7.x86_64 #1 SMP Wed Mar 20 15:54:52 UTC 2024 x86_64
Apache
: 162.240.12.249 | : 18.223.172.243
202 Domain
8.1.31
nbspublicschool
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
var /
cache /
yum /
x86_64 /
7 /
updates /
gen /
[ HOME SHELL ]
Name
Size
Permission
Action
filelists_db.sqlite
148.53
MB
-rw-r--r--
other_db.sqlite
19.76
MB
-rw-r--r--
primary_db.sqlite
155.77
MB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : other_db.sqlite
SQLite format 3 @ O -�) � �M�2�� @ YindexpkgIdpackagesM.CREATE INDEX pkgId ON packages (pkgId)K eindexkeychangechangelogJ�CREATE INDEX keychange ON changelog (pkgKey)� / �triggerremove_changelogspackagesCREATE TRIGGER remove_changelogs AFTER DELETE ON packages BEGIN DELETE FROM changelog WHERE pkgKey = old.pkgKey; ENDv �;tablechangelogchangelogCREATE TABLE changelog ( pkgKey INTEGER, author TEXT, date INTEGER, changelog TEXT)^ �tablepackagespackagesCREATE TABLE packages ( pkgKey INTEGER PRIMARY KEY, pkgId TEXT)Q{tabledb_infodb_infoCREATE TABLE db_info (dbversion INTEGER, checksum TEXT) � � E� e075c2b40e525d4aa752b17e8fbb11f11068a185fa08d55c4fe9ebf0db3508ef � =���� ' � ֗x ՋF � 7� 7�� plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments 8 ;� � 8 � o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew� o�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�b o�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�: o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re � 5l � �D o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�F o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�H o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �B � � q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server� o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication � �`� � �Go�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions� o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew� o�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests x 8 x � o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�Eo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars m va m �o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skewXoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � 4j � �Eo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�Go�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�Io�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �@ � �q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication u �� u � o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12� o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � 4j � �E!o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �@ � �$q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� #o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�"o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication u �� u �'o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX&oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�%o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN ) �� ) �E*o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G)o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�B(o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) � �@ � �-q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� ,o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�+o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication u �� u �0o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX/oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�.o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� �2o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B1o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) x 8 x � 5o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�4o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E3o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars va X8oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�7o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�6q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B:o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)�9o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o<o�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database�;o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �@ � �?q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� >o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�=o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication u �� u �Bo�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXAoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�@o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� �Do�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�BCo�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) \ \ �:Go� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5 - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)�rFq�wMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�oEo�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database � j � �;Jo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re �-Io�oMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)�cHo�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments . �� � . �INo�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions�Mo�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew�Lo�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�cKo�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS n 6n �EPo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�GOo�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter � j � �;So� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re #�-Ro�o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)�cQo�[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments . �� � . �IWo�' Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions�Vo�C Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew�Uo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�cTo�[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS P 6n P �Zo�K Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�EYo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�GXo�# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter P�$ �^o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c]o�[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;\o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re '�-[o�o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�@- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � f�� �Gao�# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I`o�' Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions�_o�C Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew x 8 x � do�S Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-8 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�co�K Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�Ebo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars e ^� � e XhoG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�go�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�fq�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� eo�S Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � � � �Bjo� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)�io�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �olo�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database�ko�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search = � = �oq�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load�Ano� Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�rmq�w Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl u �� u �ro�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXqoG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�po�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� �to�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�Bso� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �rvq�w Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�ouo�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database � � � XzoG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�yo�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�xo�G Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�Awo� Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use � � � �B|o� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)�{o�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o~o�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database�}o�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search 6 �) � 6 X�oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��o�= Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��o�G Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A� o� Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�rq�w Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl � � � �B�o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o�o�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �( � �� o�=Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance�� o�GMark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A� o�Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�q�wMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl I fI �� o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule�� m�CThierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey��- Bump version to 1.3.11.1-4 - Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype , �t.��\��D � � r , D � a746522986b0afca052c56bfe30e019392742f4feb4722768d2eb43b4babeac8D � 231493e830d00be6017e14f2838a22163835ecea8facf688b9769eed88f3c9b2D � d3229cfb18563fc8a24139a13a8b266e417258f43d36a4a4ac3b372af35d59f8D � 187145d7bfd310c612f73b86a31e75562cbe69306dca7362841fcb038b52fa3bD � 2952ebf67510a8da5c648a66cb72fb82d02a871b1b805e3fa5d9a1ab8d1377d2D � 6af757b1f83a00f0551ab69c27a637b1a7fcd95125d64c9146be9158ec4964c4D � 69b46c2053c4fbaa163f2390003a89acba1e45f20c75c06337f18474970f4943D � 8185f310e186803f0af31262808f321254090fced72ee96c77a5b4ecea2ab08cD � 5d1951ec0080791e7902a50f19ea2eab2f07b5ce3efea78f024eb1a197abfb77D � a4b372b0da7c95c62540dcfd5049d2b4cd05abf59cb373d2a9a94bcdce3472c3D � 8638584ccb7fcde8b4799f13f6a58ef2c129baba95c41aeb504453c5262416a1D � 25d8cb3d83565ead22c4bfc3963acaa10f44a28286e88bfd60ce16ec510a113bD � 47174964aa424317b7623852dab6eb134838bc81b1ecc6687a16e8461523c3c8D � a6a35e6ed55e101d96fd0ed48dd8267a7e8e10917230172a9de28a796d39490e , �t.��\��D � � r , D � 66236b68ae255104741eb03ff98c372f45d1070837fd9f390037488468b9dd1dD � 6c8904697fe6c2ee66e07070d91ead8cd93c7f2b07461f411e7fbb303c278589D � 5d56166abb7686fc795b62a2d6600a144699caccdbc3ea53b082d1535c2834b0D � 709e283813b0f0f0fdef0e1af87059ea4abce1a31640b490109436fad941d2dbD � 1315433f5602796463c98742b5395f6bc95f0716a4d9322f2131b5bd23a0bcdcD � e3f5a839e2e8acc1d26bf39b94c2d5f01d99b4c9f59926532da730dd0cc33feaD � 6777f22d398c85f89da0f1efaa40c7fb3d16e1d72eeb8ae99d1e2dc818769d0dD � 2cfc157959dd7203260a2f727d8590878e5ebaf061e1f17210e36684e46916d4D � 18552d6d05e89198db7ddef073bf9f88ff81556cc037c82a133b0eba4e12c71aD � f8c005d77b5c2074f8f5ecf019407c406d423acd0fddbce4ac8b4efa1be0f808D � 26f9837529ec8886d1314252f193f695e2df988f21ba6cbdef62da935e15848fD � 7f2bca34d66595ea71392f8a9fe4f631679313d883bbc5d48d3d49e1ceb88d8bD � 53bef7d8f496ce93d095af2f28cf9ea690f7d61117266073c87080d1457a56e3D � 27db2cd3bba9e5240c46f94fcd95f8d419bad9f865a7b32e02a98759ed918be2 � �� ��o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r�q�wMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o�o�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database � � � � ��m�CThierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey��- Bump version to 1.3.11.1-4 - Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype��o�=Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��o�GMark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�o�Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use � � � ��o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule�M�m�1James Chapman <jachapma@redhat.com> - 1.3.11.1-5f(�@- Bump version to 1.3.11.1-5 - Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request - Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c � �� ��o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r�q�wMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o�o�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database � � � � �� m�CThierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey��- Bump version to 1.3.11.1-4 - Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype�� o�=Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance�� o�GMark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A� o�Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use � �� � �c�"o�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�!o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re C�M� m�1James Chapman <jachapma@redhat.com> - 1.3.11.1-5f(�@- Bump version to 1.3.11.1-5 - Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request - Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � �^� � �G�&o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�%o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��$o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��#o�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests u 7 u � �)o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��(o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�'o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars � un � ��,o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��+o�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests��*q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � 3h � �E�/o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�.o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�-o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �> � ��2q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �1o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��0o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication \ ���' \ �G�7o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�6o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��5o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skewX�4oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��3o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN u 7 u � �:o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��9o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�8o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X�=oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��<o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��;q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load K � K �G�@o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�?o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��>o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule u 7 u � �Co�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��Bo�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�Ao� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X�FoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��Eo�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��Dq�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�Ho�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��Go�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule M 5l M ��Ko�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�Jo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�Io�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter a ]� � a X�OoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��No�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��Mq�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �Lo�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � � � �B�Qo�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��Po�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � �E�So� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars��Ro�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �> � ��Vq�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �Uo�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��To�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r ��Yo�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�XoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��Wo�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��[o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�Zo�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) K � K � �^o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��]o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�o�\o�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database u_ X�aoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��`o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��_q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�co�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��bo�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o�eo�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��do�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search e L e �c�ho�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�:�go� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5 - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)�r�fq�wMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl O�! ��lo�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�ko�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�jo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re ]�-�io�oMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�oo�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�no�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��mo�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew P 7 P �c�qo�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�E�po� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars O�! ��uo�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�to�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�so� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re a�-�ro�oMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�xo�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�wo�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��vo�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew g 7 g �-�{o�oMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�@- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)��zo�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�yo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments 0 9� � 0 ��o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��~o�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�}o�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�|o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re d � 3h � �E�o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I� o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions �>� ��q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server� �o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-8 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r �� o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� �� o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B� o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r� q�wMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o� o�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database �0 ��o�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��q�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load�A�o�Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use B �� B �B�o� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��o�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12 � � � �o�o�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��o�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search �( ��o�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��o�G Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�o� Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�q�w Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl , �t.��\��D � � r , D* � bff0a6adc60eba913218bcccc836d732221469cd7650eb27d199e3f7780373a7D) � 29d3baca7632def182f6a6250f76f26476b491b66dfe819eb6d94008003dfc3dD( � f9a690e8aa496786b4e27818af37b20bb17b3805bd626de662a2647c04ea6bb1D' � 808bc13d124b864d8dd90f80437bc5d919d6dcdca1ebbd9efcd56e575fbfb500D& � b957705e340403c636b68ab6ee9c49dd1552eb20220d0175dbbf84f042ac62c4D% � 210a76b6e2c83684ac3c106fff35849b22269be89a5b895625ac4ca5bf489796D$ � 9e9a8ce7cbf019108675746a5f67d8ff853fb0b97c72cbd0f4d38b6dad0c96b7D# � ca73e4d1c2e57869c6e300075fa3bdd65118ee30910c0ed450532b3fd0d7976bD" � c10b86b4a5c3b1385c04eab748fa24507011e241349fb530ab4df3fbb719f26eD! � bb1ab36dd4c499189f1a463cc83793aa1e996879aa0fc39e43580add7837b7c9D � cf900656ad664e99d27fd815261164678b178f186d6fbadf440dbc7ab48fbbfeD � 0f6b2d20fc79acfdc5f930788c81abbec7863d8a4d373229f80a9f4d126d1db8D � aa0fe451ab8753df55722f121169c9aca26ca19a8b763c4d7f831af3bf826a26D � e5c8dac0c01ec10e911180046ed350bf3dafcb9bd06121d746055d20b4d55586 B �� B �B� o� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��o�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12 � � � �o� o�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database�� o�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search 5 �( � 5 X�#oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��"o�= Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��!o�G Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A� o� Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r� q�w Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl � � � �B�%o� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��$o�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o�'o�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��&o�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �( � ��+o�= Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��*o�G Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�)o� Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�(q�w Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl I fI ��-o�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule��,m�C Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey��- Bump version to 1.3.11.1-4 - Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype � �� ��/o�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�.o� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r�1q�w Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o�0o�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database � � � � ��5m�C Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey��- Bump version to 1.3.11.1-4 - Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype��4o�= Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��3o�G Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�2o� Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use � �� � �c�8o�[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�7o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re {�M�6m�1 James Chapman <jachapma@redhat.com> - 1.3.11.1-5f(�@- Bump version to 1.3.11.1-5 - Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request - Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � �^� � �G�<o�# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�;o�' Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��:o�C Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��9o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests u 7 u � �?o�S Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��>o�K Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�=o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars � un � ��Bo�C!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��Ao�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests��@q�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � 3h � �E�Eo� !Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�Do�#!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Co�'!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �> � ��Hq�!!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �Go�S!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��Fo�K!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication \ ���' \ �G�Mo�#"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Lo�'"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��Ko�C"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skewX�JoG!Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��Io�9!Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN u 7 u � �Po�S"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��Oo�K"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�No� "Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X�SoG"Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��Ro�9"Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��Qq�!"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load K � K �G�Vo�##Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Uo�'#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��To�G"Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule u 7 u � �Yo�S#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��Xo�K#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�Wo� #Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X�\oG#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��[o�9#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��Zq�!#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�^o�#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��]o�G#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule M 5l M ��ao�K$Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�`o� $Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�_o�#$Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter a ]� � a X�eoG$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��do�9$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��cq�!$Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �bo�S$Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � � � �B�go�$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��fo�G$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � �E�io� %Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars��ho�?$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �> � ��lq�!%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �ko�S%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��jo�K%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r ��oo�G%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�noG%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��mo�9%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��qo�?%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�po�%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) K � K � �to�S&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��so�K&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�o�ro�s%Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database u_ X�woG&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��vo�9&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��uq�!&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�yo�&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��xo�G&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o�{o�s&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��zo�?&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search e L e �c�~o�['Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�:�}o� 'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5 - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)�r�|q�w&Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl O�! ��o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�o�['Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;� o� 'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re ��-�o�o'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�o�#'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�o�''Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��o�C'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew ts �sx}�������������������������� "',16;@EJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ! $ ' * - 0 2 5 8 : < ? B D G J N !P "S $W %Z &^ (a )d *h +j ,l -o .r /t 0v 1z 2| 3~ 4� 5� 6� 7� 8� ;� <� =� >� ?� @� A� B�" D�& E�) F�, G�/ H�2 I�7 J�: K�= L�@ M�C N�F O�H P�K Q�O R�Q S�S T�V U�Y V�[ W�^ X�a Y�c Z�e [�h \�l ^�o _�q `�u b�x c�{ e� f� g� h� i� j� k� l� m� n� p� q� r�# s�% t�' u�+ v�- w�/ x�1 y�5 z�8 |�< }�? ~�B �E ��H ��M ��P ��S ��V of flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��\ ��^ ��a ��e ��g ��i ��l ��o ��q ��t ��w ��y ��{ ��~ �� �� �� �� �� �� �� �� �� �� ��! ��# ��& ��) ��+ ��/ ��2 ��4 ��9 ��; ��= ��A ��C ��E ��G ��K ��N ��R ��U ��X ��[ ��^ ��c ��f ��i ��l ��o ��r ��t w Ã{ ă} Ń Ƅ DŽ Ȅ Ʉ ʄ ˄ ̄ ̈́ ΄ Є ф ҄! Ԅ$ Մ' ׄ+ . ل2 ۄ5 ܄7 ݄9 ބ< ߄? �A �E �H �J �O �Q �S �W �Y �[ �] �a �g �p �y � � � � �' �1 ��: ��C ��L ��U ��^ ��g ��q ��{ �� �� � P 7 P �c�o�[(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�E�o� 'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars O�! �� o�(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c� o�[(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;� o� (Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re ��-�o�o(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�o�#(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I� o�'(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions�� o�C(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew g 7 g �-�o�o)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�@- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)��o�K(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�o� (Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments 0 9� � 0 ��o�C)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��o�)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�o�[)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�o� )Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re � � 3h � �E�o� )Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�o�#)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�o�')Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions �>� �� q�!*Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �o�S*Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server� �o�S)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-8 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��o�K)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r �� o�G*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX� oG*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�� o�9*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��!o�?*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B� o�*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r�#q�w*Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o�"o�s*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database �0 ��&o�9+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��%q�!+Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load�A�$o�*Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use , �t.��\��D � � r , D8 � 7f3bdd324d9659e15f12b5165027a55a0cea71990ff77d978912c84bebe83633D7 � 81e77a0ae807ac0a5e4579c4ac44dde54b30b6b5c6ab31d335b8c1bd1836ecb2D6 � af4f36c81584781e9a0b5038c6d887f8d9a95020701f12f3688519038ca47c15D5 � 8ad876dd83b3d0a6435b5decb5ebce5c58c33e7d6fe1fd43a96a9f7e6afcb562D4 � fe65f8c1104a49b25deba3a5dd771fe3ef37e4b8efeb398644007101e18a4473D3 � fe57c2235944b61957f96287d962dc8a6f63af33aa9a45b6bff9fc30a34862f5D2 � 528e29a03538329527c3f4082c917cb49d0bf14f6f4b401f793a6ea83f341395D1 � 373ae4c777d075890ed70569cf89dd0563fc99e76ace4281502f4aed12d4dcf6D0 � 30212ff031337cd6d1555e594dd9bb0d28c9a5c7c25257cfe0770146ed77d187D/ � 37244afa6bebe0e93a5dcd0ef3ea1ac9a76f734e116ce8c087a5f791ad1136d3D. � 65debf30e942beaf68eeeebb661030f709a1c53b1981536c005e8dddf29b7da6D- � eef2f7ac436c0d23750d0d428880ec5d58260342fcb7de2587122eea70893429D, � 99549f1842c7801ff61d826ce12f1351ce7f60f836b2dcf51fb46da34c4b3d1eD+ � 6471268f8ca47b59f93b0c5a8b8bbf5e9a7d6cfb337f2a89a19b76d82ac5bde2 B �� B �B�)o�+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��(o�G+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�'oG+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12 � � � �o�+o�s+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��*o�?+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search �( ��/o�9,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��.o�G+Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�-o�+Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�,q�w+Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl B �� B �B�2o�,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��1o�G,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�0oG,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12 � � � �o�4o�s,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��3o�?,Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search 5 �( � 5 X�9oG-Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��8o�=,Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��7o�G,Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�6o�,Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�5q�w,Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl � � � �B�;o�-Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��:o�G-Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o�=o�s-Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��<o�?-Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �( � ��Ao�=-Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��@o�G-Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�?o�-Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�>q�w-Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl I fI ��Co�G.Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule��Bm�C-Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey��- Bump version to 1.3.11.1-4 - Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype � �� ��Eo�?.Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�Do�.Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r�Gq�w.Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o�Fo�s.Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database � � � � ��Km�C.Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey��- Bump version to 1.3.11.1-4 - Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype��Jo�=.Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��Io�G.Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�Ho�.Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use � �� � �c�No�[/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�Mo� /Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re ��M�Lm�1.James Chapman <jachapma@redhat.com> - 1.3.11.1-5f(�@- Bump version to 1.3.11.1-5 - Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request - Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � �^� � �G�Ro�#/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Qo�'/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��Po�C/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��Oo�/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests u 7 u � �Uo�S/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��To�K/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�So� /Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars � un � ��Xo�C0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��Wo�0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests��Vq�!/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � 3h � �E�[o� 0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�Zo�#0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Yo�'0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �> � ��^q�!0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �]o�S0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��\o�K0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication \ ���' \ �G�co�#1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�bo�'1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��ao�C1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skewX�`oG0Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��_o�90Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN u 7 u � �fo�S1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��eo�K1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�do� 1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X�ioG1Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��ho�91Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��gq�!1Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load K � K �G�lo�#2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�ko�'2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��jo�G1Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule u 7 u � �oo�S2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��no�K2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�mo� 2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X�roG2Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��qo�92Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��pq�!2Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�to�2Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��so�G2Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule M 5l M ��wo�K3Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�vo� 3Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�uo�#3Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter a ]� � a X�{oG3Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��zo�93Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��yq�!3Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �xo�S3Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � � � �B�}o�3Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��|o�G3Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � �E�o� 4Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars��~o�?3Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �> � ��q�!4Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �o�S4Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�� o�K4Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r ��o�G4Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�oG4Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��o�94Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��o�?4Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�o�4Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) K � K � � o�S5Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�� o�K5Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�o�o�s4Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database u_ X� oG5Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�� o�95Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�� q�!5Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�o�5Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��o�G5Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o�o�s5Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��o�?5Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search e L e �c�o�[6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�:�o� 6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5 - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)�r�q�w5Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl O�! ��o�6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�o�[6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�o� 6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re ρ-�o�o6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�o�#6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�o�'6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��o�C6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew P 7 P �c� o�[7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�E� o� 6Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars O�! ��!o�7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c� o�[7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;� o� 7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re Ӂ-� o�o7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�$o�#7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�#o�'7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��"o�C7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew g 7 g �-�'o�o8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�@- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)��&o�K7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�%o� 7Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments 0 9� � 0 ��+o�C8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��*o�8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�)o�[8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�(o� 8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re � � 3h � �E�.o� 8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�-o�#8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�,o�'8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions �>� ��2q�!9Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �1o�S9Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server� �0o�S8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-8 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��/o�K8Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication , �t.��\��D � � r , DF � b15c5bd5d17c47937d82efe2f0ce115cd380671ef484581d4184399c840e2c35DE � a7b0d2e78f9226d952fd5d798225620b853fb2b0edd6abeda0fcca3095856f7aDD � cf312b0640aa93a5701862f262416738887b1618922b58eaadfe16d281c1fa7dDC � d10825f54b07b6022f065b39a4e37c8c89bfdc877a230746fbbc048f9659348aDB � ef9ae19900dd432de99370f4bb886c82cc0f4b68367dc2be63113d3f3cbd48d1DA � 8b82511897f48ce484e303fe650c32ea1191e71ee0cbd9aff580743fa4f9067cD@ � 49941263a7a0309c58b3d3e00ab81c56b1ee1a70b49b873188cc23686f5d3d9bD? � cae6bd3ac4c68910abe44b5f1d6e48b99b76914d3a6223b9511bde08f8a3e1cdD> � d98a7567aa18df65a4b612f107387d6f50362fcef232a4c1fe5a246e2d477764D= � fce742e752f83c91c4d9e2dc4fad5ff1b7affb7363270b752a793df36c00754fD< � 4cae2658d6c984132e253fc1cb8af035251a3acc79acc7957fc3c92111b0f643D; � 6858631f1ec62fd357122548e9196427a27ee3daeb8bc9decbb2919eedf39730D: � 40080eb44ef8aa6b4771bc9e085e56264b9e562822c2bbfbd713b6887b64b41fD9 � 7f6f935600e1b0c0b16538a2e5c86c076209ebb973e4d33e6f98c66d85973c9e r �� r ��5o�G9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�4oG9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��3o�99Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��7o�?9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�6o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r�9q�w9Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o�8o�s9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database �0 ��<o�9:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��;q�!:Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load�A�:o�9Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use B �� B �B�?o�:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��>o�G:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�=oG:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12 � � � �o�Ao�s:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��@o�?:Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search �( ��Eo�9;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��Do�G:Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�Co�:Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�Bq�w:Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl B �� B �B�Ho�;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��Go�G;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�FoG;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12 � � � �o�Jo�s;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��Io�?;Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search 5 �( � 5 X�OoG<Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��No�=;Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��Mo�G;Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�Lo�;Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�Kq�w;Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl � � � �B�Qo�<Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��Po�G<Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o�So�s<Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��Ro�?<Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �( � ��Wo�=<Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��Vo�G<Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�Uo�<Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�Tq�w<Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl I fI ��Yo�G=Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule��Xm�C<Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey��- Bump version to 1.3.11.1-4 - Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype � �� ��[o�?=Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�Zo�=Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r�]q�w=Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o�\o�s=Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database � � � � ��am�C=Thierry Bordaz <tbordaz@redhat.com> - 1.3.11.1-4ey��- Bump version to 1.3.11.1-4 - Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype��`o�==Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-3d�@- Bump version to 1.3.11.1-3 - Resolves: rhbz#2224507 - Paged search impacts performance��_o�G=Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�^o�=Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use J �A�" � J Y�gaW>Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�fa�>Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��ea�Y>Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�da� >Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�ca{>Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)�M�bm�1=James Chapman <jachapma@redhat.com> - 1.3.11.1-5f(�@- Bump version to 1.3.11.1-5 - Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request - Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c % �h��.�@ � % y�pa�?Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��oa�Y?Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�na� ?Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�ma{?Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)e�lcm>Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�kck>Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�jcs>Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�ic7>Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ha5>Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images 7 �Y �:�R � 7 y�ya�@Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��xa�Y@Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�wa� @Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717e�vcm?Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�uck?Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�tcs?Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�sc7?Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ra5?Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�qaW?Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291) ` �Y �:� � ` ��a�YAJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�a� AJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717P� cC@Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cm@Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�~ck@Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�}cs@Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�|c7@Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�{a5@Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�zaW@Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291) d �(��%�V d �� a�YBJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P� cCAJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe� cmAJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ckAJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�csAJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7AJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5AJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aWAJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�AJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602) � �(��%�V � Q�cEBJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�cCBJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cmBJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ckBJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�csBJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7BJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5BJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY� aWBJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y� a�BJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602) d a��>�� � d P� cCCJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe� cmCJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ckCJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�csCJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7CJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5CJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aWCJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�CJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��a�YCJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553 [ �0��<�j � [ Q�'cEDJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�&cCDJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�%cmDJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�$ckDJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�#csDJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�"c7DJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�!a5DJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY� aWDJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y� a�DJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)Q� cECJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800 Y �.��:�h � Y Q�1cEEJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�0cCEJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�/cmEJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�.ckEJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�-csEJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�,c7EJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�+a5EJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�*aWEJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�)a�EJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)S�(cIDJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211 B �<� �E � � B h�:csFJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�9c7FJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�8a5FJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�7aWFJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�6a�FJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��5a�YFJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�4a� FJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�3a{FJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)S�2cIEJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211 4 �1�C�( � � 4 J�Cc7GJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Ba5GJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�AaWGJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�@a�GJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��?a�YGJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�>a� GJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�=a{GJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)e�<cmFJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�;ckFJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class='' , �t.��\��D � � r , DT � e614cee98b3c2a67c0a489a233ca9a7a574ea6bc8dd166f835f26bca8d3d5f7cDS � 6d4f5821c8a6634679262138e6c634828699fef39bbd22f409c545e572e816bcDR � 572d9ccefce27e99905ba8c221c2216b7ba572949a397e457aeaf3e65ce8b4e4DQ � fb00ca97e06f7da066e8d05cafb17b9f9680e39f50979090e489d8a1720bb4d4DP � 3fb72ac0367e9afd39874f48b9a0b356b9cbb0b86d41265538358ef72583d32dDO � 5fa6b764fa4d36de1e4b14029d52584b86f65e0020290798aecbd853fb5b4ab5DN � 96954d570d0d25ab837bbc471057f6a90d46ffff9195b1391abb3cbc708c7684DM � f6a237d150654379162b6b0cb9396c65ec4227bf24e4b01d1dbb5180dc3b28beDL � 342100bd7ce3ca8e951285697781ddb9192c0a02dd56cad55d48bdf20a74bec2DK � 54773bd4792a30ed2a90d50d65778c4d34f672bedec6da03981162ca13109417DJ � 3694e0f350aab4369f5eda09dba8aaf0c4d0128990509c2eab7a69e8a99c5400DI � 208142489b5b939b70a9d0d5242ac84ad700f6bc7f8549c1b26d447993c66b86DH � 3d1f2217dd6b5ed505a6858933c562175be86840b5c6c7328291ec8c31333a56DG � 365ab6c383dd555fe42283836abe7f7014bf20c41b0828d72f1c13ab138cc1d1 7 �.�F�+ � � 7 J�Lc7HJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Ka5HJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�JaWHJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Ia�HJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��Ha�YHJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�Ga� HJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717e�FcmGJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�EckGJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�DcsGJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflicts 1 �.�s�T � | 1 H�Ua5IJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�TaWIJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Sa�IJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��Ra�YIJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�Qa� IJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717P�PcCHJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�OcmHJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�NckHJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�McsHJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflicts d �H�y&� � d H�^a5JJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�]aWJJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�\a�JJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��[a�YJJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P�ZcCIJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�YcmIJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�XckIJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�WcsIJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Vc7IJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68 [ �H�y&�3 � [ Y�gaWKJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�fa�KJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��ea�YKJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553Q�dcEJJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�ccCJJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�bcmJJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ackJJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�`csJJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�_c7JJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68 d �h��.�� � d H�qa5LJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�paWLJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�oa�LJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)Q�ncEKJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�mcCKJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�lcmKJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�kckKJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�jcsKJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�ic7KJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ha5KJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images Y �H�y&�| � Y H�{a5MJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�zaWMJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�ya�MJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)S�xcILJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�wcELJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�vcCLJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�ucmLJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�tckLJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�scsLJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�rc7LJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68 � �H�y&�| � }�a� NJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�a{NJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)S�cIMJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�cEMJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P� cCMJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cmMJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�~ckMJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�}csMJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�|c7MJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68 I a��>�� � I k� a{OJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)e� cmNJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd� ckNJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h� csNJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ� c7NJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5NJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aWNJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�NJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��a�YNJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553 7 ��e �q � 7 e�cmOJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ckOJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�csOJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7OJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5OJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aWOJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�OJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��a�YOJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�a� OJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717 7 ��e �q � 7 e� cmPJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd� ckPJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h� csPJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ� c7PJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5PJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aWPJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�PJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��a�YPJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�a� PJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717 L �-��k � L d�(ckQJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�'csQJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�&c7QJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�%a5QJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�$aWQJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�#a�QJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��"a�YQJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�!a� QJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717P� cCPJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fix d �E�*��6 � d d�1ckRJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�0csRJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�/c7RJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�.a5RJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�-aWRJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�,a�RJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��+a�YRJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P�*cCQJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�)cmQJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again w �E�R�z/ � w h�:csSJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�9c7SJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�8a5SJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�7aWSJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�6a�SJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��5a�YSJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553Q�4cERJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�3cCRJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�2cmRJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again H �1���g � H d�DckTJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�CcsTJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Bc7TJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Aa5TJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�@aWTJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�?a�TJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)Q�>cESJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�=cCSJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�<cmSJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�;ckSJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class='' Y �E�� �x+ � Y d�NckUJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�McsUJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Lc7UJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Ka5UJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�JaWUJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Ia�UJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)S�HcITJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�GcETJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�FcCTJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�EcmTJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again , �t.��\��D � � r , Db � c7663ee5f2439075ade107aa7f0383f301032506d3673446ac4c84d046337418Da � f27e3d167e8d7cfb2c448d400f034b7443c2e076e94b38a67fddd951a9bf745eD` � bb05359bb91eb56f0684f800012c621df3fb69caa61349ed4d20292998b1cb0bD_ � 4c39fd8baa3677dd6ae1debc1bc8f2bcb012f024717dc7b97179d39ba6e3853fD^ � 177ecfa448785c1fa6fae690a5662325ebe3e141bf45117920f280b5a8880a0aD] � 0df91ae3f7e140e17025cfcac0a1bbb8507f665cf4f2ae6e8e6951f0fbc667e5D\ � 49ac1322f5ed8d216331f29c35eab930dc5be738f27bf00fca63036fbce5de80D[ � 3fa609f1cadb881d127a3eed1c7b8f2fa2ba4efc32cb2e34e025b3d4215af9d1DZ � e56a5b95dac0bbc46dff9f5743926a4f4bf4883bf7b515cdcd6310771c36a4a8DY � b095f7fcbb5d718e30c01471ddebc9eca7b0315ab21ba2c286f3e4c44b8bf2b1DX � d45776ea070dd01bfa5681b3d5be4cd2fdb7fe2baac5c1720ab216221ef7ddf8DW � c119aff62d5c0644926253cc760d84d4a8fbbb2124668b95f93468f578a85b04DV � a1ac854d8e90e02d163b93f8f41c02c3b799b35db98f425c835e937468ad058bDU � f613394ac503882a78ac261fc0ddce0cd6b033530342f31d88f080b4b99f51b0 6 �E��-� � 6 Y�WaWVJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Va�VJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��Ua�YVJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�Ta� VJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�Sa{VJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)S�RcIUJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�QcEUJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�PcCUJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�OcmUJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again % �h��.�@ � % y�`a�WJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��_a�YWJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�^a� WJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�]a{WJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)e�\cmVJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�[ckVJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�ZcsVJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Yc7VJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Xa5VJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images 7 �Y �:�R � 7 y�ia�XJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��ha�YXJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�ga� XJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717e�fcmWJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�eckWJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�dcsWJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�cc7WJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ba5WJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aaWWJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291) ` �Y �:� � ` ��ra�YYJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�qa� YJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717P�pcCXJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�ocmXJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�nckXJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�mcsXJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�lc7XJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ka5XJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�jaWXJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291) d �(��%�V d ��{a�YZJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P�zcCYJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�ycmYJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�xckYJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�wcsYJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�vc7YJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ua5YJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�taWYJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�sa�YJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602) � �(��%�V � Q�cEZJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�cCZJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cmZJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ckZJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h� csZJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7ZJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�~a5ZJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�}aWZJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�|a�ZJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602) d a��>�� � d P� cC[Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe� cm[Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd� ck[Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h� cs[Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ� c7[Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5[Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aW[Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�[Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��a�Y[Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553 [ �0��<�j � [ Q�cE\Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�cC\Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cm\Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ck\Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�cs\Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7\Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5\Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aW\Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�\Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)Q�cE[Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800 Y �.��:�h � Y Q�!cE]Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P� cC]Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe� cm]Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd� ck]Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h� cs]Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ� c7]Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5]Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aW]Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�]Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)S�cI\Jan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211 B �<� �E � � B h�*cs^Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�)c7^Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�(a5^Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�'aW^Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�&a�^Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��%a�Y^Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�$a� ^Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�#a{^Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)S�"cI]Jan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211 7 �1��: � � 7 h�3cs_Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�2c7_Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�1a5_Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�0aW_Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�/a�_Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��.a�Y_Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�-a� _Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717e�,cm^Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�+ck^Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class='' d �1�?�g � d h�<cs`Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�;c7`Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�:a5`Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�9aW`Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�8a�`Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��7a�Y`Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P�6cC_Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�5cm_Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�4ck_Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class='' H �1���g � H d�FckaJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�EcsaJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Dc7aJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Ca5aJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�BaWaJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Aa�aJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)Q�@cE`Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�?cC`Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�>cm`Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�=ck`Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class='' 6 �E��-� � 6 Y�OaWbJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Na�bJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��Ma�YbJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�La� bJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�Ka{bJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)S�JcIaJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�IcEaJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�HcCaJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�GcmaJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again 7 �h��.� � 7 Y�XaWcJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Wa�cJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��Va�YcJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�Ua� cJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717e�TcmbJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�SckbJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�RcsbJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Qc7bJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Pa5bJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images , �t.��\��D � � r , Dp � 21113ab4dcd135895d98e51d9d540e8be477abdc44e185a460a9a835e382a7c1Do � a3a98ff12318616c1641d6e0d2dadf6e2f268b6bbc34e65924fe720f0ed2b498Dn � b59dc7ffbf0ef066ff9a1cf076ed8bff6d49817bed656cf03853d4c14c19563fDm � c7c905b4d230c3305d7223c1efb2e2c29d90ee0fe667ec5973b84522b52f1b7cDl � d309a7bec2af466981338b2729711aca0aac30101fc7b53822baf4eca6bf3bf3Dk � d85c7c7044bb25d459d1d3377a16e6bc25cd16ea3a67985795886527085aca81Dj � da671c2234ad85d7898dc39cf7cbbe3f81c92f9de8153ed656a948fe022cc14bDi � b73a625e6724b514380e5393dc8ac1ff68137ee32e63057c82c80eb5439701baDh � 82770f241e9bdc035784ea9189503fbe592d5c29147b6f0860949963afbefbe1Dg � 20385107dd6a4623cd7aaccc57b216a7fd04a22b8f56bf7e874d9fbe49095bf1Df � 53cb4b1814b006d5822769285fafe984c2312ad59f2a1efd65a648bf4d1f6df1De � af07229f94ef571d7d7fa63fd7b1e5c4feaf193b6302b4faf6e64302611433ceDd � 62f87a828471cada41da0e65515893c663ffb4843c97b49a68ce916292d1f8b2Dc � 4dc1a1327e468460b517ab53ed5f213f2ea0b15a999fc2c3f80d7d5b477118cd d �h��.�< � d Y�aaWdJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�`a�dJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��_a�YdJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P�^cCcJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�]cmcJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�\ckcJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�[cscJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Zc7cJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Ya5cJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images d �h��.�� � d H�ka5eJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�jaWeJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�ia�eJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)Q�hcEdJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�gcCdJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�fcmdJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�eckdJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�dcsdJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�cc7dJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ba5dJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images a �H�y&�| � a L�u_?fDaniel Mach <dmach@redhat.com> - 0.14.8-3R�k�- Mass rebuild 2013-12-27h�teqfJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q��- Patch for double free, CVE-2013-2126, BZ 968387.^�se]fJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q��- Latest upstream, fixes gcc 4.8 issues.S�rcIeJan Horak <jhorak@redhat.com> - 6.9.10.68-7e;�- Added fix for CVE-2021-40211Q�qcEeJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�pcCeJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�ocmeJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�nckeJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�mcseJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�lc7eJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68 / s�-�c � � / h�~eqgJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q��- Patch for double free, CVE-2013-2126, BZ 968387.^�}e]gJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q��- Latest upstream, fixes gcc 4.8 issues.e�|oafDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142 - Resolves: RHEL-9524b�{o[fDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S��- Update to 0.19.4 - Resolves: #1741274b�zo[fDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,��- Update to 0.19.2 - Resolves: #1543597|�yo� fDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,��- Remove the samples subpackage from RHEL 7 - Resolves: #1543597b�xo[fDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\��- Update to 0.19.1 - Resolves: #1543597_�w�?fDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925R�U�- Mass rebuild 2014-01-24� �v��fDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R�=�- Fix CVE-2013-1438 and CVE-2013-1439 - Resolves: #1002718 K �$�]�y � K ^�e]hJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q��- Latest upstream, fixes gcc 4.8 issues.e�oagDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142 - Resolves: RHEL-9524b�o[gDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S��- Update to 0.19.4 - Resolves: #1741274b�o[gDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,��- Update to 0.19.2 - Resolves: #1543597|�o� gDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,��- Remove the samples subpackage from RHEL 7 - Resolves: #1543597b�o[gDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\��- Update to 0.19.1 - Resolves: #1543597_��?gDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925R�U�- Mass rebuild 2014-01-24� � ��gDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R�=�- Fix CVE-2013-1438 and CVE-2013-1439 - Resolves: #1002718L�_?gDaniel Mach <dmach@redhat.com> - 0.14.8-3R�k�- Mass rebuild 2013-12-27 A �F�W�s � A e�oahDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142 - Resolves: RHEL-9524b�o[hDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S��- Update to 0.19.4 - Resolves: #1741274b�o[hDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,��- Update to 0.19.2 - Resolves: #1543597|� o� hDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,��- Remove the samples subpackage from RHEL 7 - Resolves: #1543597b� o[hDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\��- Update to 0.19.1 - Resolves: #1543597_� �?hDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925R�U�- Mass rebuild 2014-01-24� � ��hDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R�=�- Fix CVE-2013-1438 and CVE-2013-1439 - Resolves: #1002718L� _?hDaniel Mach <dmach@redhat.com> - 0.14.8-3R�k�- Mass rebuild 2013-12-27h�eqhJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q��- Patch for double free, CVE-2013-2126, BZ 968387. H �4�X�� � H b�o[iDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S��- Update to 0.19.4 - Resolves: #1741274b�o[iDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,��- Update to 0.19.2 - Resolves: #1543597|�o� iDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,��- Remove the samples subpackage from RHEL 7 - Resolves: #1543597b�o[iDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\��- Update to 0.19.1 - Resolves: #1543597_��?iDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925R�U�- Mass rebuild 2014-01-24� ���iDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R�=�- Fix CVE-2013-1438 and CVE-2013-1439 - Resolves: #1002718L�_?iDaniel Mach <dmach@redhat.com> - 0.14.8-3R�k�- Mass rebuild 2013-12-27h�eqiJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q��- Patch for double free, CVE-2013-2126, BZ 968387.^�e]iJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q��- Latest upstream, fixes gcc 4.8 issues. E �7�}��) � E b�"o[jDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,��- Update to 0.19.2 - Resolves: #1543597|�!o� jDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,��- Remove the samples subpackage from RHEL 7 - Resolves: #1543597b� o[jDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\��- Update to 0.19.1 - Resolves: #1543597_� �?jDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925R�U�- Mass rebuild 2014-01-24� � ��jDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R�=�- Fix CVE-2013-1438 and CVE-2013-1439 - Resolves: #1002718L� _?jDaniel Mach <dmach@redhat.com> - 0.14.8-3R�k�- Mass rebuild 2013-12-27h� eqjJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q��- Patch for double free, CVE-2013-2126, BZ 968387.^�e]jJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q��- Latest upstream, fixes gcc 4.8 issues.e�oaiDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142 - Resolves: RHEL-9524 E �3�g�) � E |�+o� kDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-2\,��- Remove the samples subpackage from RHEL 7 - Resolves: #1543597b�*o[kDebarshi Ray <rishi@fedoraproject.org> - 0.19.1-1\��- Update to 0.19.1 - Resolves: #1543597_�)�?kDaniel Mach <dmach@redhat.com> - 0.14.8-5.20120830git98d925R�U�- Mass rebuild 2014-01-24� �(��kDebarshi Ray <rishi@fedoraproject.org> - 0.14.8-4.20120830git98d925R�=�- Fix CVE-2013-1438 and CVE-2013-1439 - Resolves: #1002718L�'_?kDaniel Mach <dmach@redhat.com> - 0.14.8-3R�k�- Mass rebuild 2013-12-27h�&eqkJon Ciesla <limburgher@gmail.com> - 0.14.8-2Q��- Patch for double free, CVE-2013-2126, BZ 968387.^�%e]kJon Ciesla <limburgher@gmail.com> - 0.14.8-1Q��- Latest upstream, fixes gcc 4.8 issues.e�$oajDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142 - Resolves: RHEL-9524b�#o[jDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S��- Update to 0.19.4 - Resolves: #1741274 A �6�A � �/u�!lBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)e�.oakDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-2e6`@- Fix CVE-2021-32142 - Resolves: RHEL-9524b�-o[kDebarshi Ray <rishi@fedoraproject.org> - 0.19.4-1]S��- Update to 0.19.4 - Resolves: #1741274b�,o[kDebarshi Ray <rishi@fedoraproject.org> - 0.19.2-1\,��- Update to 0.19.2 - Resolves: #1543597 r � ��2u� lBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�1u�lBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �0k�-lThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) of wflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� �( �1 �: �D �N �W �` �i �r �{ � � � �! �* �3 �< �F �O �X �a �k �u �~ � � � �" �+ !�/ "�2 $�7 %�9 &�< '�A (�C )�F *�K +�M ,�P -�U .�W /�Z 0�_ 1�a 3�d 4�i 5�k 6�n 7�s 8�u 9�x :�} ;� <� =� >� ?� @� A� B� C� D� E� F�% G�' H�* I�/ J�1 K�4 L�9 M�; N�> O�C P�E Q�H R�M S�O T�R U�W V�Y W�\ X�a Y�c Z�f [�k \�m ^�r _�w `�~ a� b� c� d�& e�0 f�: g�D h�N i�X j�b k�l l�s n�y o� p� q� r� s� t� u�' v�, . ��� � . �I�7k�+lThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��6u�-lBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�5uSlBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�4k�slThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�3u�AlBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �9u�!mBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�8k�_lThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��<u� mBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�;u�mBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �:k�-mThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�Ak�+mThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��@u�-mBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�?uSmBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�>k�smThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�=u�AmBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �Cu�!nBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�Bk�_mThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��Fu� nBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�Eu�nBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �Dk�-nThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�Kk�+nThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��Ju�-nBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�IuSnBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�Hk�snThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�Gu�AnBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �Mu�!oBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�Lk�_nThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��Pu� oBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�Ou�oBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �Nk�-oThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�Uk�+oThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��Tu�-oBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�SuSoBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�Rk�soThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�Qu�AoBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �Wu�!pBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�Vk�_oThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��Zu� pBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�Yu�pBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �Xk�-pThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�_k�+pThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��^u�-pBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�]uSpBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�\k�spThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�[u�ApBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �au�!qBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�`k�_pThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) , �t.��\��D � � r , D~ � 8376cfa512fe6b2ff76656a962eb9991e84736e4a697d521ce94ef01b76d8224D} � 96e5936275322903cfbb6baf53a0c7b17d256a8f32f01311f863e027c6f7d955D| � 1eae80c524fc2bc5a90ced35062890a40b5625b866e658c984d2c21a6b84fbdaD{ � 0d7ee838bc95b1ca0f6653c7bb6bf7f82fd91bddf5008eb108ab46da2a4a15a4Dz � bcf2e159d49fe0cc5b342fc05255f862141272c22ce694e38e0133129e1ca198Dy � 6a1e8e996df86eab01a9069d9b5a346d8a727e6c633a9f89b1adef59b208e01dDx � cbb13427dedac5cf271bc5a5113b736a34f96516510eb972cb3320ae396950fbDw � 80bdac5815e2cb87ffd8f9a1347f373f9a9ced0b8d2fe36ed814bd54f4ef39faDv � 366db37e736f288688e2f7de25a2589d720f57d0ee9d9147989b609d9dfea648Du � 9b6de03afb9e2ed1eb1fe326e14a90ed08a67cee15e148db6d1d484cd4022e4cDt � d7b21ff17ce56f83ff2000fca6f369f4160b7c039d960862da62ff6aab5c8df3Ds � 3cbf76c62b3dabd78db73ad0e95a34d50022e61f36e7a967aabcc7f9c3f4c6ccDr � 2020ae44e6c85c50fdf7fbfec19d2bbaf6f8395f641b1b48c4743285b9fd8bdcDq � 121ed67b550b9b757c921a1f6eba668e72a8d28d183054b14f8e1d37b81b602b r � ��du� qBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�cu�qBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �bk�-qThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�ik�+qThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��hu�-qBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�guSqBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�fk�sqThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�eu�AqBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �ku�!rBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�jk�_qThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��nu� rBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�mu�rBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �lk�-rThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�sk�+rThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��ru�-rBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�quSrBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�pk�srThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�ou�ArBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �uu�!sBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�tk�_rThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��xu� sBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�wu�sBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �vk�-sThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�}k�+sThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��|u�-sBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�{uSsBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�zk�ssThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�yu�AsBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �u�!tBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�~k�_sThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��u� tBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�u�tBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� � k�-tThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�k�+tThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��u�-tBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�uStBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�k�stThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�u�AtBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � � u�!uBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�k�_tThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � �� u� uBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B� u�uBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� � k�-uThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�k�+uThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��u�-uBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�uSuBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�k�suThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y� u�AuBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �u�!vBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�k�_uThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��u� vBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�u�vBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �k�-vThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�k�+vThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��u�-vBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�uSvBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�k�svThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�u�AvBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � � u�!wBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c� k�_vThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � �� u� wBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B� u�wBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� � k�-wThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�%k�+wThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��$u�-wBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�#uSwBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�"k�swThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�!u�AwBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �'u�!xBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�&k�_wThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��*u� xBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�)u�xBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �(k�-xThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�/k�+xThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��.u�-xBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�-uSxBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�,k�sxThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�+u�AxBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �1u�!yBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�0k�_xThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��4u� yBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�3u�yBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �2k�-yThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�9k�+yThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��8u�-yBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�7uSyBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�6k�syThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�5u�AyBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �;u�!zBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�:k�_yThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��>u� zBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�=u�zBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �<k�-zThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�Ck�+zThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��Bu�-zBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�AuSzBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�@k�szThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�?u�AzBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �Eu�!{Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�Dk�_zThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��Hu� {Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�Gu�{Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �Fk�-{Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�Mk�+{Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��Lu�-{Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�KuS{Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�Jk�s{Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�Iu�A{Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �Ou�!|Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�Nk�_{Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��Ru� |Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�Qu�|Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �Pk�-|Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�Wk�+|Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��Vu�-|Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�UuS|Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�Tk�s|Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�Su�A|Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �Yu�!}Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�Xk�_|Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��\u� }Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�[u�}Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �Zk�-}Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�ak�+}Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��`u�-}Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�_uS}Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�^k�s}Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�]u�A}Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �cu�!~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�bk�_}Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��fu� ~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�eu�~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �dk�-~Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�kk�+~Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��ju�-~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�iuS~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�hk�s~Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�gu�A~Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � �`�m[�iSumit Bose <sbose@redhat.com> - 0.8.1-8\��@- Various updates for RHEL-7.7 - many adcli-krb5-????? directories are created /tmp [#1588596] - adcli exports kerberos ticket with old kvno [#1642546] - [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911] - Improve handling of service principals [#1644311] - [RFE] adcli command with --unix-* options doesn't update values in UnixAttributes Tab for user [#1337489] - [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187] - [RFE] Need an option for adcli command which will show domain join status. [#1622583]�c�lk�_~Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) f �s,��W��; � � f D� � 3d9697b9d1df6afe1e6f7753c817927e77aab45d8ae4e6b00aab690614c170a3D� � 27b3a6d5e1c664607297b18087e7b61c8f79281dcd08b501d6a4a98d0f06ccc1D� � 2eebe28ab1f164eeb8573869c86de47b750d8a043f1b3897566fe0753003f2a4D� � 43e5f421e8e3c2fe23f7a93bd002c12ec11faf3194b342d07ee3a9f9fb37a875D� � dc1ec1c4e74af368428ce982615f87d7121b8baea33bec02313d1f3b501a036eD� � 892fa4df2150169a5c8680af75e4e63f2ffbf5ca0f9dafb19d1928769a5769b9D� � e291f44f4466940d2b21380d3d68e50016685dad9868bd9563a304233da7eca0D� � da160f160c233fe77d6e2113aad1a189ed766c41fc8254b49f764306d9538dc9D� � b8b4286c072a6e2914a35c1f9d77c2d2f6fc910361424e0fd362363d7d5d74a7D� � 82e901dcdc6ecc6088013e726925ea0a208b449014b09f844465ad5d7b305805D� � f7e3acc601ed8b9698fbc58cf297b2ad5a49ead168e515f329e2d95f3cd8083dD� � e00e4e27e76a7ce874a947e6df6282be03c80787552e9101d00197dc467c0182D � db29a04632a66bb63dd0b015dea1aadce0cd2e22371225ebfeec0ec5dec16c02 - �OV � - ��r]�ESumit Bose <sbose@redhat.com> - 0.8.1-13^ �@- adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1786776]��q]�KSumit Bose <sbose@redhat.com> - 0.8.1-12]o�@- adcli info should send netlogin pings to all domain controllers, not only a subset [#1685138]�u�p]�Sumit Bose <sbose@redhat.com> - 0.8.1-11]e@- Fixes and improvements for RHEL-7.8 - Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745] - adcli update --add-samba-data does not work as expected [#1738573]�#�o]�mSumit Bose <sbose@redhat.com> - 0.8.1-10]QT�- adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab: Cannot allocate memory" [1665162]��n[�5Sumit Bose <sbose@redhat.com> - 0.8.1-9\��- Fixes for RHEL-7.7 updates - additional patch for [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187] - new patches for many adcli-krb5-????? directories are created /tmp [#1588596] � �( � ��w�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildV�vaQSumit Bose <sbose@redhat.com> - 0.8.1-16.1_��A- add missing patch for [#1871436]��u]�+Sumit Bose <sbose@redhat.com> - 0.8.1-16_��@- adcli: couldn't connect to KEYRING:persistent:0:krb_ccache_jgrrBI8 [#1871436]��t]�5Sumit Bose <sbose@redhat.com> - 0.8.1-15^�(@- More fixes for RHEL-7.9 - No longer able to delete computer from AD using adcli [#1840752] - adcli: presetting $computer in $domain domain failed: Cannot set computer password: Authentication error [#1762633]�j�s]�{Sumit Bose <sbose@redhat.com> - 0.8.1-14^�=@- Fixes for RHEL-7.9 - Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622] - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258] s Q�e � s c�~gc �Radovan Sroka <rsroka@redhat.com> - 0.15.1-12X���- RHEL 7.4 ERRATUM Resolves: rhbz#1377215��}m�% �Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-11W�@- Corrected typos in the default configuration file Resolves: rhbz#1304334�)�|m�g �Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-10Wm �- Updated the default configuration file. New defaults contributed by Steve Grubb. Resolves: rhbz#1304334��{k�M �Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-9S�u�- Don't require prelink on aarch64 and ppc64le Resolves: rhbz#1078555 Resolves: rhbz#1125462M�z_? �Daniel Mach <dmach@redhat.com> - 0.15.1-8R�U�- Mass rebuild 2014-01-24M�y_? �Daniel Mach <dmach@redhat.com> - 0.15.1-7R�k�- Mass rebuild 2013-12-27�+�xk�m �Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-6R|�@- warn if processing prelinked binary objects and the prelink binary is not available Resolves: rbhz#1004826 T �#�m�s � T b�_i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�_u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h�cq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^�_a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R�[M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldapt� e� �Radovan Sroka <rsroka@redhat.com> - 0.15.1.1a��@- backported fix for CVE-2021-45417 resolves: rhbz#2041952c�gc �Radovan Sroka <rsroka@redhat.com> - 0.15.1-13X��@- RHEL 7.4 ERRATUM Resolves: rhbz#1400548 I ��b��h � � I b�_i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�_u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h� cq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^� _a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R� [M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap�� o�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L� ]? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 I ��b��h � � I b� _i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�_u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h�cq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^�_a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R�[M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��o�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L�]? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 I ��b��h � � I b�&_i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�%]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�$_u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�#[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�"[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h�!cq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^� _a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R� [M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap�� o�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L� ]? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 I ��b��h � � I b�0_i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�/]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�._u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�-[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�,[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h�+cq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^�*_a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R�)[M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��(o�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L�']? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 I ��b��h � � I b�:_i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�9]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�8_u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�7[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�6[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h�5cq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^�4_a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R�3[M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��2o�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L�1]? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 I ��b��h � � I b�D_i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�C]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�B_u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�A[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�@[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h�?cq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^�>_a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R�=[M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��<o�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L�;]? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 I ��b��h � � I b�N_i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�M]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�L_u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�K[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�J[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h�Icq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^�H_a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R�G[M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��Fo�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L�E]? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 I ��b��h � � I b�X_i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�W]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�V_u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�U[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�T[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h�Scq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^�R_a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R�Q[M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��Po�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L�O]? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 I ��b��h � � I b�b_i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�a]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�`_u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�_[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�^[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h�]cq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^�\_a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R�[[M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��Zo�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L�Y]? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 I ��b��h � � I b�l_i �Honza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013L�k]? �Daniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27h�j_u �Jan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableF�i[5 �Joe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64C�h[/ �Joe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2h�gcq �Jon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.^�f_a �Jan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)R�e[M �Joe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��do�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L�c]? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 � ���n � � r�se� �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-20U���- build the package with hardening flags (PIE, full RELRO)s�re� �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-18T.��- filter environment variables not acceptable in bash inputN�qa? �Daniel Mach <dmach@redhat.com> - 3.1.13-17R�U�- Mass rebuild 2014-01-24�@�p{� �Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16RΏ@- the correct solution is remove smp_flags, they don't work properly on ppc with the option mpower7 - Related: rhbz#1048745��o{�) �Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-15Rʚ�- remove old changelogs - ppc fail to rebuild package - Resolves: rhbz#1048745��no�= �Luboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64L�m]? �Daniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 e �r+��V��: � � e D� � 552aefa94572e48c27a350e1ef2936db101b0d78eba2ef8d8369a651e1bbd1dfD� � bb6e90b56d4b253121d4d970d8427ccc31a51594a6631e598efd9c3a3c659156D� � cb5931215d156696cbe58219e39202ac72b87128adece13396ffa94ab6dad395D� � 586962e501bdd67c2893b8019c9cdcd07d6767b123c3fe8e93e64e94439c832bD� � b05cbfb8155501322d2372a41219a106a3f361ad36d86f1e9fcf2f235dd2e63cD� � 328461666a24e217d010ef9c4a1fa1802b6a66e769d41f06e0f36ef5390ce3b5D� � 0a712b8f1eda25e3f9a256fe884b8e622404b2f830abfa7cb7a720a164b44109D� � 7d5e6120ec65accb2c5c369568085687a5c6a5b1b8a72db4eab223aeff60b971D� � b1fc5ae8c9c372eb9d1971e1612aa3947e2c1b7fb9700813c9c66f35908dd4b3D� � d7f65f5f9fa39de94807feafc132da13d35ac5d5d8864bf8bb7af2099bd8163eD� � 56771785cffde9bcf2a1b33447024e6a12a3805c64a69be7e940a45fda1e2824D� � 73839ad166f5daa6f4e5a2a9b08686fda05962283302afa1963df3b66c4b53e0D� � f9a5378694573063ecf61c516d27731ba3a515cc1b91bfced9a7057634a8d54c ] ��U � ] ��y{�) �Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-15Rʚ�- remove old changelogs - ppc fail to rebuild package - Resolves: rhbz#1048745`�xe_ �Jan Staněk <jstanek@redhat.com> - 3.1.13-25b ��- re-import selinux support from upstreamO�we= �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-24[W�- log the jobs being run��ve� �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23Y�o@- fix the ownership of the spool directory (#1414228) - document the -n option of atd (#739870) - fix handling of the aborted jobs (due to possibly temporary conditions) and avoid flooding the syslogh�ueo �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-22WB�- SIGPIPE should not be ignored in atd (#1338039)�e�te�g �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21Wo@- correct the DST correction when using UTC time specification (#1328832) - clear non-job files from at dir and test for write error on fclose to fix bogus syslog messages � <�u � h�eo �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-22WB�- SIGPIPE should not be ignored in atd (#1338039)�e�~e�g �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21Wo@- correct the DST correction when using UTC time specification (#1328832) - clear non-job files from at dir and test for write error on fclose to fix bogus syslog messagesr�}e� �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-20U���- build the package with hardening flags (PIE, full RELRO)s�|e� �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-18T.��- filter environment variables not acceptable in bash inputN�{a? �Daniel Mach <dmach@redhat.com> - 3.1.13-17R�U�- Mass rebuild 2014-01-24�@�z{� �Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16RΏ@- the correct solution is remove smp_flags, they don't work properly on ppc with the option mpower7 - Related: rhbz#1048745 b ��F� � b t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode`�e_ �Jan Staněk <jstanek@redhat.com> - 3.1.13-25b ��- re-import selinux support from upstreamO�e= �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-24[W�- log the jobs being run�� e� �Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23Y�o@- fix the ownership of the spool directory (#1414228) - document the -n option of atd (#739870) - fix handling of the aborted jobs (due to possibly temporary conditions) and avoid flooding the syslog � x�� � ~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black�� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� � u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS 1 '�(�H � 1 ��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black�� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� � u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��'u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �&u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�%uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�$u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��#u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�"uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�!w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�,w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��+u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��*g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�)w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�(ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�4w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�3ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��2u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �1u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�0uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�/u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��.u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�-uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��;u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �:u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�9uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�8u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��7u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�6uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�5w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�@w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��?u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��>g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�=w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�<ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�Hw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Gui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Fu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Eu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Duw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Cu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Bu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Auw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��Ou� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Nu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Muw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Lu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Ku� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Juw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�Iw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�Tw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��Su�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��Rg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�Qw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Pui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�\w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�[ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Zu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Yu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Xuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Wu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Vu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Uuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��cu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �bu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�auw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�`u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��_u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�^uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�]w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�hw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��gu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��fg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�ew� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�dui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�pw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�oui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��nu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �mu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�luw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�ku[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��ju� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�iuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor e �r+��V��: � � e D�% � 81673643543357b7e306b0565d82bcd642537fefb2eb0244c2dc8b1dbe481c2bD�$ � 7a7b265708dca056a11cfae6ae29db41405f54311ecc3a62636751d2e8044546D�# � 5530c892f1f2952996a03043005582fd05142b2402c3d3ba2d871149e6f6b902D�" � cb353d5c74471de09be7e0fd09fe8cc300e96b28268cedc2c0c08e286daf5f95D�! � a1015ebe13614d40e027fbd95e9c012b121af65537d9fa42d84ae37bd4b3f77aD� � 8ce3c00b5ddec20bc2e8b9298da33c7143687fe46bc2765f98f31a35a820ac4dD� � da01a171c185a98e0fc00bd31c919dcde123a4f0d7b42379acae4b7bd481a35aD� � 275d7c54ef8b97dfca3a0aeae434bcf2bc9cc690357c78c2944a06043dd90fbeD� � d20149409ae526dab742784b326a5dd70b37681effe645a6221fdfc0adcaf401D� � fdff2f1a1756e0f2d41cfa80f3b32907c40bd0172a470e140d1cb91e3b1dbecaD� � b0fbae2e0eb181380b19d158478bf7d42c9f4424384f6f24d8b1d95b7a9954b9D� � 8a6f4b746d5edf5cd1a9c83d8f03ddbe3050f70230be328aa88328d12100ea4bD� � 43797987bd1c6a7789711b4d44fcbdd981073b3086621718cadbafddd9a64625 1 '�(�H � 1 ��wu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �vu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�tu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��su� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�ruw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�qw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�|w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��{u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��zg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�yw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�xui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��~u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�}uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 �� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� � u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 �� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� � u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�$w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��#u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��"g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�!w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�,w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�+ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��*u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �)u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�(uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�'u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��&u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�%uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��3u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �2u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�1uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�0u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��/u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�.uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�-w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�8w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��7u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��6g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�5w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�4ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�@w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�?ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��>u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �=u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�<uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�;u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��:u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�9uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��Gu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Fu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Euw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Du[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Cu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Buw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�Aw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�Lw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��Ku�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��Jg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�Iw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Hui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�Tw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Sui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Ru� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Qu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Puw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Ou[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Nu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Muw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��[u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Zu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Yuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Xu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Wu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Vuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�Uw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�`w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��_u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��^g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�]w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�\ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�hw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�gui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��fu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �eu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�duw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�cu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��bu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�auw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��ou� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �nu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�muw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�lu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��ku� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�juw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�iw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�tw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��su�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��rg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�qw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�pui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black e �r+��V��: � � e D�2 � 40e08209c8de5003d4423a0ad7ed9c6b0f8180f4ac00c11d42d96a7a5069ebdbD�1 � 0dafa08f6f467ecca9fd5fafad09fcd5cac9b1f2f050f88329a90f3434c52078D�0 � cfeadf715a776582bc168121a31f85069becc17f2556be2c3ea11c7d6040209dD�/ � 6d1d56332454173cddc2595690e7c56c35decdfd2263853829c0fd32e430c247D�. � 3525be93a809d42aa8d6b8563d5762f4fd6f25a1b228b65589656a65c2bbba4aD�- � e638dd51d9159ae8157653edb26aaf106eb560ae53f15fb80efa319e41e729b6D�, � 29938eb53cc7e9d2d0198a3a51f899d7a6d63659353fc78aac0dd24310a2cd39D�+ � dd33037be3199f5576c54b56155a6558f0ffc24162964a2a3f1e2dd0be0681c8D�* � a1186ec734eb9834a2715c84b38c55a5efc049d49063deb03d006c6cbc9dd48cD�) � 0ddc672fbbf22b385a04e5922c34037d8950a75fb1cd0527f909bcc1783abb9fD�( � 46604e7e63c82851d300be853fd43bec9f863d6c14a9a404185a9c0fe6b88932D�' � cfeef0c73c66033047dc4cf15b633dace6008e084cb069e2c95d1c60abffd496D�& � 04c1cb44a333186da972033dd6cf11d36780a1631c165568ae8099544c2c1543 ��!� � ~�|w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�{ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��zu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �yu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�xuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�wu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��vu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�~uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�}w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� � u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858�� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�$w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�#ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��"u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �!u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858�� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��+u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �*u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�)uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�(u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��'u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�&uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�%w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�0w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��/u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��.g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�-w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�,ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�8w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�7ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��6u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �5u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�4uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�3u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��2u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�1uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��?u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �>u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�=uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�<u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��;u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�:uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�9w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�Dw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��Cu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��Bg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�Aw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�@ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�Lw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Kui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Ju� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Iu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Huw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Gu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Fu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Euw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��Su� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Ru�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Quw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Pu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Ou� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Nuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�Mw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�Xw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��Wu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��Vg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�Uw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Tui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�`w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�_ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��^u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �]u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�\uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�[u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Zu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Yuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��gu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �fu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�euw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�du[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��cu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�buw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�aw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� x�; y�@ z�H {�O |�T }�\ ~�c �h ��p ��w ��| �� �� �� �� �� ��$ ��, ��3 ��8 ��@ ��G ��L ��T ��[ ��` ��h ��o ��t ��| �� �� �� �� �� ��$ ��+ ��0 ��8 ��? ��D ��L ��S ��X ��` ��g ��l ��t ��{ �� �� �� �� �� ��# ��( ��0 ��7 ��< ��D ��K ��P ��X ��_ ��d ��l ��s ��x �� Ï ď ŏ Ə Ǐ( ȏ/ ɏ4 ʏ< ˏC ̏H ͏P ΏW Ϗ\ Џd яk ҏp ӏx Տ א ؐ ِ ې ܐ ݐ% ߐ( �- �4 �: �A �H �N �U �\ �b �i �p �v �} � � � ��` � �U�lw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��ku�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��jg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�iw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�hui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�tw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�sui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��ru� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �qu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�puw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�ou[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��nu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�muw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor e �r+��V��: � � e D�? � 53cf10100297e3ee9624975cc473fc78d64bd6ad2a0106e1e5fd695e76c2ce9cD�> � 334cdf2e5acff8ba4421fc51d46210b1cc6cca7070a3a55c0b71135ea842a3c7D�= � cda41b361d863ac2471e67f30a37dfa1d776eb1ecdfd24b6d620d454ea726cf4D�< � e55f24cd7b3be8300c44b260f1159a66b99a1775ff2fe6134024d8c234f14559D�; � 0184b3c53d99c0d7a743fc2eefaec2158d3ccddc254688d6b5fed77bcdaf78d0D�: � 39ac208f2aaeedee724d09ffc9d779294a7721cd83807bbda081d0114bd94acdD�9 � fad6c8c1ae7000eeba2040a8163e5cc4920ac0d48ff08d1634dbe24df69b112dD�8 � 5b0b31c3c4aa723f9a677d0ccaea58da6ec37710d6177cb930b490c716240bf8D�7 � be0ce9e4ff4bdfae6a6868243b708bb09deb84a5401d6d59e749b0aa376ff432D�6 � 5d2375f20cc25e073efba76f4aeff505ebc4d30019f64ff6c16696cf30c075d2D�5 � 11d3ec6a7cbf0f5ab4a611abed3a8e577bdb9e6c35243dff95e929892554069cD�4 � 64701408bd6314de93c364f1b1a6d1f58f607d97f62aed713456040f9a7d6a21D�3 � 7b8ac8b33b435a9814ec099de17eab143568599d591c4426da4cffcce26808a6 1 '�(�H � 1 ��{u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �zu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�yuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�xu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��wu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�vuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�uw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��~g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�}w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�|ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858�� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��#u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �"u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�!uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858�� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�(w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��'u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��&g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�%w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�$ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�0w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�/ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��.u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �-u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�,uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�+u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��*u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�)uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��7u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �6u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�5uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�4u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��3u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�2uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�1w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�<w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��;u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��:g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�9w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�8ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�Dw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Cui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Bu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Au�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�@uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�?u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��>u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�=uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��Ku� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Ju�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Iuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Hu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Gu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Fuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�Ew�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�Pw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��Ou�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��Ng�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�Mw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Lui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�Xw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Wui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Vu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Uu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Tuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Su[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Ru� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Quw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��_u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �^u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�]uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�\u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��[u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Zuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�Yw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�dw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��cu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��bg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�aw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�`ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�lw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�kui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��ju� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �iu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�huw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�gu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��fu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�euw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��su� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �ru�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�quw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�pu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��ou� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�nuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�mw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�xw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��wu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��vg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�uw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�tui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black e �r+��V��: � � e D�L � fdb3d033e3ca54175fbc3432d0eaabe73a06e7062247eadf1c8f79411c315081D�K � 9888e1c7e5a6ba68fcb281294fab022f976b2e122801da77461f2029f281517bD�J � b5a2b6df0e41a71f9cfd396eaf57386bb3c21a06e22de723d7391c558e82402fD�I � 327a16cb84103e242030ecfe69ccf4a3d6b745ebcaa6a416efaf9fd6b57dbb18D�H � cb993c6b41619d0b739c98a53cc2ca52430d470822dc5d7f74a0f2761581971bD�G � 497675cb6d7517ba23fea71659d07fd3761c557cdf9fd151aa544223dbc11237D�F � ffe6c8fe6239af5ba9b802d1110485c57c37832e367d2ff85fa1252c920e1193D�E � 89c58d30f7f1b409bf2172a4eb140ffdd938bbe72118610420ec4abc9c64eff6D�D � 03a8c1b34a6e0348a56c5f5c1e6d5f586c514da1b01b442feaf2c7dfec629173D�C � fb0edda86631e065ab929a5645c3c5c9573ef194bf8813617457f152c46177e3D�B � 6814c1585ec14edaecfb3a1c411a60fa17aa216d2f668964f68de8ee908ba367D�A � bf547b98a8486311d474acce3d85c5eab20067359561488db6243baf1f10d389D�@ � 31678e32384951f2d0803f480a17916c8967a20bfa4c0a7b627436b112c717fd ��!� � ~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��~u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �}u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�|uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�{u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��zu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�yuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog�� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode�� g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog�� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode�� g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�(w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�'ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��&u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �%u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�$uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�#u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��"u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�!uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��/u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �.u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�-uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�,u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��+u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�*uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�)w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�4w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��3u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��2g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�1w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�0ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�<w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�;ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��:u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �9u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�8uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�7u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��6u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�5uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��Cu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Bu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Auw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�@u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��?u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�>uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�=w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�Hw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��Gu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��Fg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�Ew� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Dui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�Pw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Oui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Nu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Mu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Luw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Ku[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Ju� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Iuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��Wu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Vu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Uuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Tu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Su� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Ruw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�Qw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�\w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��[u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��Zg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�Yw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Xui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�dw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�cui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��bu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �au�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�`uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�_u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��^u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�]uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��ku� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �ju�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�iuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�hu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��gu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�fuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�ew�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�pw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��ou�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��ng�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�mw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�lui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~�xw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�wui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��vu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �uu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�tuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�su[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��ru� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�quw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor e �r+��V��: � � e D�Y � 98c4c14b7a0910ce624cb7b36dfb871441e4dc7f083e2dc7b39b52dfce97238fD�X � f023965895ca396ee7837ef741c80807f3fcd4e941fe9b021ef6476083832b31D�W � 2a3e32785639d588761d6bf2e56e7121d3b1a72e11b62d59b95a594bbfe19836D�V � ac61f136dfa8ec37083c4218f10c4b90438fde96c223895a6e3d08660c0652f3D�U � 7cf9167bef9413a9b392bca9faff3196f5c05d3ec73a6d3e2429936ca11db4a3D�T � 9fe95cd53733c5ac4fb1ee1e907acf53ce9a1661cc2b2e83a473ca67ae9bfc46D�S � 5c57f76aba32a986317ac294945a789bd49f7cd09491d4a66c8c259b336a13dbD�R � fbae91cfe9ae73876a8eeb3b715dacaef2f15103aae6c0a6040a7aec6578cc0dD�Q � 3ec6e9340959cede8f65ef85eb65d48800aad8e51db71b9f3bd47bed04cd9c3aD�P � 33aa69d7f9394b9a6d1d03cca5e79975ae42fc6d8a6d1794ebe7bfcf8d3bf01aD�O � fb3f399c2cd3a00d11861039ba16df58c2d041ebce64824acdef0563df4d8ed8D�N � a27a74e92715fbe40b9a7d67bedad0e62952307a43ea09eecd25aa1667294bd5D�M � a93df30801aba8cea190c36d5bfa44f375fde46284080e1a7e93e5873bc75bb9 1 '�(�H � 1 ��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �~u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�}uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�|u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��{u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�zuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�yw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��` � �U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��!� � ~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black�� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� � u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor 1 '�(�H � 1 ��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog � ��� � �h�[�w �Ian Kent <ikent@redhat.com> - 5.0.7-109][�- bz1728914 - getmntent returns additional "-hosts" entries when automounter is used with "hosts" map - fix missing initialization of autofs_point flags. - Related: rhbz#1728914�d�[�o �Ian Kent <ikent@redhat.com> - 5.0.7-108]M`@- bz1728914 - getmntent returns additional "-hosts" e ڂ�g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ntries when automounter is used with "hosts" map - remove unused function has_fstab_option(). - remove unused function reverse_mnt_list(). - remove a couple of old debug messages. - fix amd entry memory leak. - fix unlink_mount_tree() not umounting mounts. - add ignore mount option. - use ignore option for offset mounts as well. - add config option for "ignore" mount option - use bit flags for autofs mount types in mnt_list. - use mp instead of path in mnt_list entries. - always use PROC_MOUNTS to make mount lists. - add glibc getmntent_r(). - use local getmntent_r in table_is_mounted(). - refactor unlink_active_mounts() in direct.c. - don't use tree_is_mounted() for mounted checks. - use single unlink_umount_tree() for both direct and indirect mounts. - move unlink_mount_tree() to lib/mounts.c. - use local_getmntent_r() for unlink_mount_tree(). - use local getmntent_r() in get_mnt_list(). - use local getmntent_r() in tree_make_mnt_list(). - Resolves: rhbz#1728914 N��Q �9� [� �Ian Kent <ikent@redhat.com> - 5.0.7-114^��@- bz1847762 - automount program crashes with "malloc(): invalid next size (unsorted) - initialize struct addrinfo for getaddrinfo() calls. - fix quoted string length calc in expandsunent(). - fix autofs mount options construction. -Resolves: rhbz#1847762�� [�7 �Ian Kent <ikent@redhat.com> - 5.0.7-113^��A- Fix changelog revision for previous 2 commits. - Related: rhbz#1806514 rhbz#1818664�H�[�7 �Ian Kent <ikent@redhat.com> - 5.0.7-112^��@- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign - fix trailing dollar sun entry expansion. - Resolves: rhbz#1818664�!�[�i �Ian Kent <ikent@redhat.com> - 5.0.7-111^{G�- bz1806514 - strictexpire option not set for offset mounts - fix patch not applied. - Related: rhbz#1806514�.�[� �Ian Kent <ikent@redhat.com> - 5.0.7-110^{G�- bz1806514 - strictexpire option not set for offset mounts - also use strictexpire for offsets. - Resolves: rhbz#1806514 q =P q �[� i�O �Ian Kent <ikent@redhat.com> - 5.0.7-116el7_9.1c�- bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems with mount trigger - fix kernel mount status notification. - Resolves: rhbz#2107752�i� [�y �Ian Kent <ikent@redhat.com> - 5.0.7-116_� A- bz1885511 - automount force unlink option (-F) does not work as expected on autofs-5.0.7-109.el7 - fix incorrect logical compare in unlink_mount_tree(). - Related: rhbz#1885511�?� [�% �Ian Kent <ikent@redhat.com> - 5.0.7-115_� @- bz1885511 - automount force unlink option (-F) does not work as expected on autofs-5.0.7-109.el7 - fix direct mount unlink_mount_tree() path. - fix unlink mounts umount order. - bz1858586 - autofs share doesn't mount when using nobind over RDMA where nfs-server and nfs-client are the same systems - mount_nfs.c fix local rdma share not mounting. - Resolves: rhbz#1885511 rhbz#1858586 � 3��% � �!�%[�i �Ian Kent <ikent@redhat.com> - 5.0.7-111^{G�- bz1806514 - strictexpire option not set for offset mounts - fix patch not applied. - Related: rhbz#1806514�.�$[� �Ian Kent <ikent@redhat.com> - 5.0.7-110^{G�- bz1806514 - strictexpire option not set for offset mounts - also use strictexpire for offsets. - Resolves: rhbz#1806514�h�#[�w �Ian Kent <ikent@redhat.com> - 5.0.7-109][�- bz1728914 - getmntent returns additional "-hosts" entries when automounter is used with "hosts" map - fix missing initialization of autofs_point flags. - Related: rhbz#1728914�d�"[�o �Ian Kent <ikent@redhat.com> - 5.0.7-108]M`@- bz1728914 - getmntent returns additional "-hosts" e ށI�![�9 �Ian Kent <ikent@redhat.com> - 5.0.7-107]@1@- bz1734057 - automount segfaults if a bad hosts entry is added in /etc/auto.master - fix reset flex scan buffer on init. - Resolves: rhbz#1734057 ntries when automounter is used with "hosts" map - remove unused function has_fstab_option(). - remove unused function reverse_mnt_list(). - remove a couple of old debug messages. - fix amd entry memory leak. - fix unlink_mount_tree() not umounting mounts. - add ignore mount option. - use ignore option for offset mounts as well. - add config option for "ignore" mount option - use bit flags for autofs mount types in mnt_list. - use mp instead of path in mnt_list entries. - always use PROC_MOUNTS to make mount lists. - add glibc getmntent_r(). - use local getmntent_r in table_is_mounted(). - refactor unlink_active_mounts() in direct.c. - don't use tree_is_mounted() for mounted checks. - use single unlink_umount_tree() for both direct and indirect mounts. - move unlink_mount_tree() to lib/mounts.c. - use local_getmntent_r() for unlink_mount_tree(). - use local getmntent_r() in get_mnt_list(). - use local getmntent_r() in tree_make_mnt_list(). - Resolves: rhbz#1728914 k 4�k �9�([� �Ian Kent <ikent@redhat.com> - 5.0.7-114^��@- bz1847762 - automount program crashes with "malloc(): invalid next size (unsorted) - initialize struct addrinfo for getaddrinfo() calls. - fix quoted string length calc in expandsunent(). - fix autofs mount options construction. -Resolves: rhbz#1847762��'[�7 �Ian Kent <ikent@redhat.com> - 5.0.7-113^��A- Fix changelog revision for previous 2 commits. - Related: rhbz#1806514 rhbz#1818664�H�&[�7 �Ian Kent <ikent@redhat.com> - 5.0.7-112^��@- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign - fix trailing dollar sun entry expansion. - Resolves: rhbz#1818664 4 =P � � 4 ]�-�5 �Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.109-1YJ_�- Update to 1.11.109[�,�3 �Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.90-1Y$$@- Update to 1.11.90[�+�3 �Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.63-1X�,�- Update to 1.11.63�i�*[�y �Ian Kent <ikent@redhat.com> - 5.0.7-116_� A- bz1885511 - automount force unlink option (-F) does not work as expected on autofs-5.0.7-109.el7 - fix incorrect logical compare in unlink_mount_tree(). - Related: rhbz#1885511�?�)[�% �Ian Kent <ikent@redhat.com> - 5.0.7-115_� @- bz1885511 - automount force unlink option (-F) does not work as expected on autofs-5.0.7-109.el7 - fix direct mount unlink_mount_tree() path. - fix unlink mounts umount order. - bz1858586 - autofs share doesn't mount when using nobind over RDMA where nfs-server and nfs-client are the same systems - mount_nfs.c fix local rdma share not mounting. - Resolves: rhbz#1885511 rhbz#1858586 Q � �� � Q � �4u�' �Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.23.2-1.1bq@- Rebase to 1.23.2 to fix issues with upgraded libs Resolves: rhbz#2073979�5�3s�y �Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-5Z���- Append python-botocore and python-jmespath bundled directory to search path where needed Resolves: rhbz#1509434p�2sq �Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-4Zz�@- Bundle python-colorama Resolves: rhbz#1509434��1s�C �Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-1Za�- Update to 1.14.28 - Replace python-rsa with python-cryptography Resolves: rhbz#1509434]�0�5 �Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.133-1Y�?@- Update to 1.11.133��/�� �Fedora Release Engineering <releng@fedoraproject.org> - 1.11.109-3Yx�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild[�.�1 �Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.109-2YJ_�- Forgot to update � ^�.�" � ��:w� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-31[@- Append '/' while tab completing directory names Resolves: #1495398��9w� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-30Y��- Check for multibyte characters in commands Resolves: #1487615��8w� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-29Y�@- Fix a pipe fd leak in process substitution Resolves: #1473245��7a�A �Kamil Dudka <kdudka@redhat.com - 4.2.46-28X���- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd Resolves: #1429838��6a�Q �Kamil Dudka <kdudka@redhat.com - 4.2.46-27X� @- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables Resolves: #1426026� �5w�G �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-26X�Y�- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname Resolves: #1379237 i�[�L � ��Aa�A �Kamil Dudka <kdudka@redhat.com - 4.2.46-28X���- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd Resolves: #1429838��@a�Q �Kamil Dudka <kdudka@redhat.com - 4.2.46-27X� @- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables Resolves: #1426026� �?w�G �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-26X�Y�- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname Resolves: #1379237j�>wa �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-35an�@- Bump version number Resolves: #2015565� �=w�! �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-34]V��- BASH_CMD should not be writable in restricted shell Resolves: #1693181|�<w� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-33\��- Add support for bracketed paste mode Resolves: #1573901��;w�1 �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-32\�@- Add configuration option for logging bash history to syslog Resolves: #1160482 W z�i�S � W j�Hwa �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-35an�@- Bump version number Resolves: #2015565� �Gw�! �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-34]V��- BASH_CMD should not be writable in restricted shell Resolves: #1693181|�Fw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-33\��- Add support for bracketed paste mode Resolves: #1573901��Ew�1 �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-32\�@- Add configuration option for logging bash history to syslog Resolves: #1160482��Dw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-31[@- Append '/' while tab completing directory names Resolves: #1495398��Cw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-30Y��- Check for multibyte characters in commands Resolves: #1487615��Bw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-29Y�@- Fix a pipe fd leak in process substitution Resolves: #1473245 p ?�M] p ��N�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-15Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildO�Mm5 �Tom Callaway <spot@fedoraproject.org> - 0:5.2-14P�6@- Package NOTICE.txt�l�L]�} �Andy Grimm <agrimm@gmail.com> - 0:5.2-13P3x@- This package should not own _mavendepmapfragdir (RHBZ#850005) - Build with maven, and clean up deprecated spec constructs - Fix pom file (See http://jira.codehaus.org/browse/MEV-592)��K�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-12P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT�Jq; �Gerard Ryan <galileo@fedoraproject.org> - 0:5.2-11O�@- Inject OSGI Manifest.�=�Ii� �Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10O y�- Specify explicit source encoding to fix build with Java 7. - Install jar and javadocs unversioned. - Crosslink with JDK javadocs. I f���; � I ��U�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-12P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT�Tq; �Gerard Ryan <galileo@fedoraproject.org> - 0:5.2-11O�@- Inject OSGI Manifest.�=�Si� �Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10O y�- Specify explicit source encoding to fix build with Java 7. - Install jar and javadocs unversioned. - Crosslink with JDK javadocs.��Ro�9 �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-19c��@- Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920L�Q]? �Daniel Mach <dmach@redhat.com> - 05.2-18R�k�- Mass rebuild 2013-12-27� �Po� �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-17Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571��Oo�? �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-16Q��- Complete spec file rewrite - Build with Maven instead of Ant - Remove manual subpackage �#� � ��\o�9 �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-19c��@- Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920L�[]? �Daniel Mach <dmach@redhat.com> - 05.2-18R�k�- Mass rebuild 2013-12-27� �Zo� �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-17Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571��Yo�? �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-16Q��- Complete spec file rewrite - Build with Maven instead of Ant - Remove manual subpackage��X�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-15Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildO�Wm5 �Tom Callaway <spot@fedoraproject.org> - 0:5.2-14P�6@- Package NOTICE.txt�l�V]�} �Andy Grimm <agrimm@gmail.com> - 0:5.2-13P3x@- This package should not own _mavendepmapfragdir (RHBZ#850005) - Build with maven, and clean up deprecated spec constructs - Fix pom file (See http://jira.codehaus.org/browse/MEV-592) � �$� � ��b{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��a{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��`{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�_wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�^wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�]{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��i{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��h{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��g{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�f}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��e{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�d{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�c{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��p}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�o}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��n}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�m}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��l{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�k{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�j{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?�v}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��u{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�t{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�s{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��r{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��q{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�F � b m�}{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�|{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��zq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��y}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�x}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��w}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) e �r+��V��: � � e D�f � 664e7cfa4c02ab9121f80adbb03b0b47bb258e1ff0c45161da3208d48bf6750aD�e � d6069d49f727f500878d2326ae170486edd57be2ead8d6aa3454e528b9d0cad7D�d � efe7ae6b25e582508f3ba41e0017ca4b0ffbec80692919abd79c1b54bbb43465D�c � 18b2663b932253d1cd4199938857bde269a7f2c90665ff7782c334d88b68f7b7D�b � 42b68ad1d87236d5de03de1b7d591b6a993c1067b4bb54558ceaa48a68fff9e1D�a � ecbe95651dc59d12d773005ad0f00df91c1b689c1ad0402467603a9ab799c2fbD�` � 7200ad28455e7f8044a9521a187ff712e7d782e9a38db84d1c18e9b54e7a9a28D�_ � 1e67462d537e085a22099169bfc37a18a1e6f210a61839b9e0b229fcde3add6eD�^ � 1edd338d1d20b130c1a107ea59652842ef0a8167393745468301105b2a59ca6dD�] � 76f7044e7f7cf0b257e3f983a0bb8457ed7e60c7c386096fd844e8a43f3614acD�\ � 10a06eabffcd2d73d1de3fa1821108cbfe10fb4977603c9f495854984a91542bD�[ � 958d635feece68e98a7942fb734aa2b1c79c887db56e57df5884c0a90afa291fD�Z � e6f4e61f30e26ae0718f9ae0753c408d47f937201175fa1753774f9139b55f1c x d�� � x ��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��~{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) r���/ � p� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) � n�Z � x�w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� � s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)�� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) ~ z��y � ~ g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) b �� b �,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) V ���2 � V r�#wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�"wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�!wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase { ��t�y { �z�){�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�({W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �'{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�&wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�%w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�$w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �0{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�/wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�.w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�-w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��,{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�+wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�*wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) L ��!�2 � L [�7wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��6{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��5{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�4wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�3wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�2{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�1{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers o�) � ��>{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��={� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�<wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�;wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�:{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�9{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �8{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) # n�i� � # d�EwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Dwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�C{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�B{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �A{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�@{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��?{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) x�^�z g�K{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�J{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�I{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��H{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��G{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��F{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � �$� � ��Q{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��P{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��O{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�NwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Mwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�L{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��X{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�WwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Vwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�U{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��T{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�S{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�R{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rf � ��_{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�^}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��]{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�\{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�[{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��Z{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��Y{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?�e}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��d{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�c{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�b{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��a{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��`{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) _ b�]�C � _ m�l{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�k{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��j{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��i{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��h}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�g}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��f}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��rq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��q}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�p}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��o}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�n}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��m{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) n���+ � p�y}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��x}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�w}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��v{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�u{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�t{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��s{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) n�Z�v � �?� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�~{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�}{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �|s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��{s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��z}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) e �r+��V��: � � e D�s � 01af8dbfbd06ab846b1473d9c0c02a8f51af1a47c8d92957ff4e5508b3d647daD�r � 334b38af49e56e5f0435be05785e022ac744d9fb66965fc0b8baeec1fbc47653D�q � d1092d59f303a24817bad40a23bbaac2dcc1d56beef54c5d1c3d42e225090212D�p � 12356c5566012c75f7cff8722dced224c1aa54d1c80a99482b0c3ec180432929D�o � 4b10b467e7f7d3c03d65a1978142de23e7d3b60c9c6729496eac6cd915d2e83cD�n � 42ff9328e94163ac1555369afb66d510954eee171420041d8a4d8bcf504fe3f8D�m � 89bf5b84dc71e5ad5f0d9d9867283539d89d67b1aa0c88f54a59c8766c3d2351D�l � ae6ecf30bc0a1b8e2c0c2d8702e3eaf7db4864987e02a301446311ff1594d050D�k � 58d55e76b88d088f5d397d7b1d908c6ffc3f06ec1ee82d97c1383fb167104aabD�j � 1a87cf953d16581b70a51f9c131f6f714e364e0a57dee8b2856b43aad7d89104D�i � 87690efabf1c1904d1640276e18c4a1568f33f6688bfde4c8352defdd62b25d4D�h � 3f9569f5e76f2c85ea0b8843abaa2fe4d295bef235b8e3c6c65588c40bfbaad2D�g � badfc32e957614210eda392b71e458da964b3e66c2b8b1d7b457703c93fb8070 I b�]�I � �s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � �9�> � {� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) # o�) � # {�%w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��${� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�#wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�"wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�!{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) P�a� � � d�,wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�+wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�*{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�){W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �({�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�'wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�&w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�3wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�2{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�1{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �0{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�/wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��.{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��-{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � ���� � � g�:{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �9{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�8{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��7{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��6{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��5{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�4wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��@{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��?{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��>{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�=wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�<wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�;{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��G{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�FwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Ewu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�D{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�C{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�B{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�A{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake h x�rf h �z�M{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��L{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�K{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�J{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��I{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��H{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �"�� � m�T{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�S{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��R{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��Q{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��P{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�OwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Nwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) = d��, � = ��Z{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�YwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Xwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�W{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)�?�V}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��U{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) x�rf � ��a{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�`}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��_{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�^{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�]{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��\{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��[{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?�g}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��f{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�e{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�d{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��c{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��b{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) G b�]�M � G q�n{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��m{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��l{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��k{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)��j}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�i}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��h}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��t}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�s}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��r}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�q}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��p{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�o{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � x�rf � �?�z}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��y{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�x{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�w{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��v{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��u{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) J b�]�P � J q�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��~q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�|}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��{}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) e �r+��V��: � � e D� � 9c36a1622791ce03d6ac94ea9fa499f523998938199fdd4b31677374da4a1118D� � c19e37c8595f0a36840e5ffde24ba2022e36425cc814639db070930027e078abD�~ � 5bc7e489f2286aea26973b124918a70b6f8f29e9936508ee68e5fa89b453002bD�} � ee52c09ab7dca8a8e11fe87c0855b1ce38df1fdaef899e8ce50d80b72009b62bD�| � 5ea154c824570a42b00ec0dd66ecba1eb3ba53a7d8875b374a32bfc093aea76fD�{ � e27571469712e3c2e9c26aebde7261eee92c600cc19e6d3f6b1bc172f0234ab4D�z � 5171be56dca06ca1e7da429b0b918c643f00522f432cfaa4d67aeea0ee796306D�y � f82ec6b5a321f21916898763958f2f66aa27af989f717611ee77da7475cd01dbD�x � 9440248086b43cdef2b59af7d4689cf4358b9549a0e882439813dcc84f72e359D�w � 5d5eaf30c36d5edff16d10d59883fcd24b4d915f4f6a332fd0a4498d47a9abe2D�v � f41e3da0ff09a0dfcee4669524a544896ae845227cd61f6da9cf4fac362b2c63D�u � e69d6d87e87eca926adc10baf1eeb4125ba0103b79977c638b305b870f7d2110D�t � fd7c147bd421d47e6afa077b39fee3edde95b7c1ad7a4371b4271f0aaea8ca13 � ��1� � ��}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � {�ui � �?� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) C b�]�I � C q�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)� �s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � z�xl � �?� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� � s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) I b�]�I � �%s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��$s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��#}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�"}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��!}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) q �@�4 q �?�*}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��){�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�({c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�'{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�H�&s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers I b�]�I � �/s�# �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��.s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��-}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�,}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��+}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � �9�> � {�4w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�3wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��2w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�1w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�0s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers of fflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� � � �# �) ��0 ��7 ��> ��E ��K ��Q ��X ��_ ��e ��l ��r �y � � � � � � �% �, �3 �: �@ �G �M �T �Z �a �g �n �t �z � � � � � � �% �* �/ �4 "�: #�A $�G %�N &�U '�\ (�c )�i *�p +�w ,�~ -� /� 0� 1� 2� 3�& 4�- 5�3 6�9 7�? 8�F 9�L :�R ;�Y <�` =�f >�m ?�s @�y A� B� D� E� F� G� H�$ I�) J�. K�4 L�; M�A N�H O�O P�V Q�] R�c S�j T�q U�x V� W� Y� Z� [� \� ]�' ^�- _�3 `�: a�@ b�F c�M d�T e�[ � P�a� � � t�:wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�9{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�8{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �7{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�6wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�5w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) m ��� \ � m � �A{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�@wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�?w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�>w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�=wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��<w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�;w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�Gw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Fwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Ew� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�Dwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�C{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�B{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�NwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Mwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�L{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�K{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �J{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�IwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Hw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�U{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �T{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�SwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Rw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Qw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Pwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Ow� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�\wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�[w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Zw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Ywq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�XwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Wwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�V{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�cwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��b{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�awU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�`wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�_{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�^{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �]{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�i{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�h{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �g{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�fwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�ew�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�dw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �p{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�owC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�nw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�mw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��l{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�kwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�jwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�ww� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��v{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��u{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�twU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�swu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�r{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�q{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�~wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�}wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�|{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �z{�! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�ywC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�xw�c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�� {� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) e �r+��V��: � � e D� � af6f8cc2f0f6c25b367a6731610bc84784ff7ff2b8355c606556d449c930b965D� � a09beb8f5ef98b4539f6e145b9e6318297e4159b1e5234b77768dd9c5b344039D� � 13955770f0ef1cb7ca5e13e21afb4cd0cce8b0b1d8181ffddb7f3fd4fad797e1D� � 2eeaafbd3cb22d15a16eddd840a62f042636325ea6009b82fbb72f520fc834b2D� � ad66c6e64486ef32978fa8bc2e30651674507fed936596d70705e9e334965f98D� � 7a8a2950c90f28d4e41ed775b9ba97a61e78927e387a936edd2bb1ccadd3bdc7D� � e024eb4fe098b64e9e4de794efbaffc32240faa47afbd2335907c1f6f78cb52bD� � 7e64442436c5c1978be36615d69bc4f59a79cef4c9a5819e922bc16f290cdc13D� � 1039cd93e11117af53816432e691fa32ce9f5c6aef8a37f44ed3c7b1291ba097D� � b7454eacf95c0a09d97a1463029b82bc777116a9ed468c5edd4c0e8ec75006e6D� � 1cd733c69fed61cd28bbf528bf31510db3dbaaa4cbc45ab7ed8a654264b298aaD� � 337b3b492087333d675bf644cd7cab27fad998fd2eb5f3f1064b766e5fbf85c1D� � dfe4993ac8d4d097c4e5e97fc006d27039a6a3d4cc79f87f4d56c9e79afd3a86 * ����% � * g� {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq� {kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g� {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m� {cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��&{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��%{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��${�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�#wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�"wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�!{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��-{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�,wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�+wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�*{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�){WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�({cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�'{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�3{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��2{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�1{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�0{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��/{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��.{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��9{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��8{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��7{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�6wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�5wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�4{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) 2 � �z 2 �D�?a�)Tomas Krizek <tkrizek@redhat.com> - 11.1-1X�,�- update to letest upstream version - resolves: #1393889 Rebase to bind-dyndb-ldap 11+ - resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down - resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error��>_�)Petr Spacek <pspacek@redhat.com> - 10.0-5W�v@- resolves: #1376851 Unable to set named_write_master_zones boolean on upgrade|�=_�Petr Spacek <pspacek@redhat.com> - 10.0-4W� @- resolves: #1366565 Deletion of DNS root zone breaks global forwarding��<{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�;{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�:{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake H �� ] � H |�F_�Stepan Broz <sbroz@redhat.com> - 11.1-7.1fM�@- Rebuild required for BIND changes for KeyTrap change (CVE-2023-50387)��Em�9Alexander Bokovoy <abokovoy@redhat.com> - 11.1-7]o�@- Fix attribute templating in case of a missing default value - Resolves: rhbz#1748904�=�De�Petr Menšík <pemensik@redhat.com> - 11.1-6\b�@- Bump BIND version and fix library dependecies - Rebuild for bind 9.11.3. Minor tweaks to compile. - Support for bind 9.11.5 headersn�Ce{Petr Menšík <pemensik@redhat.com> - 11.1-5[ �@- Resolves: #1580389 depend on bind with writeable home��Ba�#Tomas Krizek <tkrizek@redhat.com> - 11.1-4Yf@- Resolves: #1469563 required bind version doesn't have the dyndb interface� �Aa�;Tomas Krizek <tkrizek@redhat.com> - 11.1-3Y ��- resolves: #1436268 crash when server_id is not present in named.conf - coverity fixesX�@aSTomas Krizek <tkrizek@redhat.com> - 11.1-2X�,�- bump NVR to fix bind dependencies � �$� � ��L{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��K{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��J{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�IwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�HwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�G{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) H � �� � H t�Rwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�Q{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)�?�P}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��O{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�N{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�M{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake w ���� w ��Y{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�X{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�W{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��V{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��U{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��T{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�SwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) =�-�' � ��`{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�_{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�^{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��]{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��\{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��[{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�Z}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) � =�,� � ��f{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��e{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)��d}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�c}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��b}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�a}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) n���+ � p�m}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��l}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�k}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��j{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�i{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�h{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��g{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) � n�T�p � ��s{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�r{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�q{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��p{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��o{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��n}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) � =�,� � ��y{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��xq� Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��w}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�v}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��u}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�t}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) n���+ � p� }g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�~}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��}{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�|{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��z{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) � n�W�s � ��{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��q� Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) e �r+��V��: � � e D� � 620e6945f7639eacc1508005775c37d66e64ae3f5ec915e87d132a17a45d3999D� � 84515e054cf47fee3e466382e25e19eb92f6f9947741105ea5f6071f7fe18185D� � b7958e30f90b1219e2202114385b2a92aa2271e3064f4b5e46ba9f99c2beeef9D� � a9b560ad84f4c4da2302f2f1c1581df4d699c0e0f9cf0754e125b2bab6ea4795D� � 28d32718cac59baf9c4162573d291af2345e664d16de912661fa18de7157ca63D� � e0386a64a095ddfdf29e498080b5d77f7bb681d49c55cf461188e3263c1ab429D� � 94b92924f85680ecbc45ab163f775966e4511c2f9885c4c80f5e90d414a6b7edD� � 92aef4b8e3ee011c2535abd3662b5231c16dfc9b45c3e7649a1a6b3355518f1bD� � 7a15e89049ae929f16d7970980522d53b696c61a5d5ce15d47c614ac40e4e05cD� � 69c9b42984d2a52a135360b34ce4482f7f1f7c83bcdc685dbc6cc7db28136840D� � 472dfbe984defab2da4d391865a8dad49409470d075bba14d4c3b8ed3ece9e0dD� � 43e92b9290406137c9b3c56768f3269a089b338a410de4e2879c249fd794ac2bD� � 330b8ae0aa3720eeebeb9d9321a83a407e356101f5d7cb524b333e0a138ceb96 � =�,� � � � s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)�� s�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�� }�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p� }gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) n���+ � p�}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) n�Z�v � �?�}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) I b�]�I � � s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)�� s�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�� }�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p� }gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) q �@�4 q �?�$}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��#{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�"{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�!{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�H� s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers I b�]�I � �)s�#Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��(s�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��'}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�&}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��%}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � �9�> � {�.w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�-wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��,w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�+w}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�*s� Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�4wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�3{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�2{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �1{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�0wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�/w�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) m ��� \ � m � �;{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�:wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�9w�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�8w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�7wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��6w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�5w}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�Aw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�@wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��?w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�>wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�={�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�<{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�HwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�GwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�F{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�E{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �D{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�CwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Bw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�O{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �N{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�MwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Lw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Kw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�JwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Iw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�VwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Uw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Tw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�SwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�RwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�QwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�P{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�]wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��\{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�[wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�ZwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�Y{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�X{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �W{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�c{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�b{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �a{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�`wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�_w�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�^w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �j{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�iwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�hw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�gw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��f{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�ewUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�dwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�qw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��p{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��o{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�nwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�mwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�l{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�k{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�xwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�v{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�u{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �t{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�swCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�rw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�~{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�}{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �|{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�{wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��z{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��y{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) e �r+��V��: � � e D�' � 9a5fa14360c626a157114ece6ad7b3186a9d13ffe35b54f68fab1678618a929dD�& � b822a9890f5063ab0234ba6cf91bd64b1adc0c4e2f854176b9b00a76b414ca7eD�% � 5b81f0de16b9e09141c5ea31f902a18f54277c2e168b86007146e71b8f29b163D�$ � 36ae65670b57a81f320f0e21426f30d359715f401c51ab27568393a36e6d75aaD�# � 60b33a8a989840613908660e2204def7a4fe9b0d9cbcdf16e46b65bfc1c9bb2cD�" � f3e24a8285c55480cfef6e63c976be0f143c1010b3511cdb0c8f2bc86dd82ef4D�! � b9d806c4557aff349da1d626e32967c4202becbc72147a2c93ba8a440c08995cD� � ef26f87d833891a36ec1eeac1cbd5de9be6729295a8243544f11a26a7e28373aD� � bd09bb37e73e22a5b20339a2eafaa7a10698dd1ebf5a8bf4c187d59b68d06a60D� � 56cdf3051f5fd87ff809ab1843192abe235c6093bc0a83213f73bb7ebe2a0f2aD� � e87be7552176482fd5e981021e62d2dab6c7950108f44af47af3d68b9fa442a8D� � e8843e39d98b4c77a9cab62b23793b825c2c78175ae84da344250acedf05778eD� � ddbc53b44a7ec6dd175840df4ba96e8440a167aca06195e38f9ce8e768f82f30 � �$� � �� {�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � �� {�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��'{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�&wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�%wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�${�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�#{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�"{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�!{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�-{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��,{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�+{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�*{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��){�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��({� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��3{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��2{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��1{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�0wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�/wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�.{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��:{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�9wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�8wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�7{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��6{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�5{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�4{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?�@}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��?{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�>{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�={k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��<{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��;{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��F{�#!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��E{�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��D{�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�CwU!Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Bwu!Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�A{�{!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��M{�#"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��L{�"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��K{�"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�J}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��I{�7!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�H{c!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�G{k!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��T}�!"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�S}g"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��R}�9"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�Q}�"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��P{�7"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�O{c"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�N{k"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�^�z � �?�[}�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��Z{�7#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�Y{c#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�X{k#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��W{�##Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��V{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��U{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) _ b�]�C � _ m�b{c$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�a{k$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��`{�#$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��_{�$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��^}�!#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�]}g#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��\}�9#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��hq�$Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��g}�!$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�f}g$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��e}�9$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�d}�$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��c{�7$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � x�rf � �?�n}�%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��m{�7%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�l{c%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�k{k%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��j{�#%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��i{�%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�F � b m�u{c&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�t{k&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��s{�#&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��rq�%Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��q}�!%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�p}g%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��o}�9%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) x d�� � x ��{s�&Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��z}�!&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�y}g&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��x}�9&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�w}�&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��v{�7&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � r�l�` � �?�}�'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�~{k'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��}{�#'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)� �|s�#&Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) e b�]�I � e m�{c(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �s�#'Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�'Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�!'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) e �r+��V��: � � e D�4 � e08149c8f4894437d1cb9d2b60f6771c7922cc3b83c5f92705e75f509b048115D�3 � 5af6b82a47585513d5a6a8ccc974d524ebc2a67fba642652aa75b566045b004cD�2 � d1270ff691bc97bc9a737c8556081408a04f2a325ffb0db2fb561a7add15d0e6D�1 � 64c82c743b0aa34d2ad89724607562e8cf196bdaec58dcfd940a8f728ce9c754D�0 � e9c3f41aecb56447424691a9aedff1c7449cb17f5a1e759c6f7c7c089b2d1adfD�/ � 6df17149302a2cb98a128880ea6df6fe1092d0cd169dda5bd470cf1dc5c73494D�. � f23ad28777ef3020a0b4c72141bc0d367c9a60a8eca144eafcef471df349d126D�- � 0f6bed5732bc76bfe3e0c85d59ade8d7716ebb9113974ea0d93511212d1907dfD�, � f9112352a12b79f2772b0d357f993f93cfbadb96eb79b1c1b7ea2072dad1e32aD�+ � 80e8a702983be224224c674404dfed4b8a89aa2c699a0bb3c32dc8c20f0219c9D�* � 6cb04e523ff2e6b8d60ef0c4e8df263d8d56af10fd076b4510daa749d0d1b65dD�) � 28f3f06dbb75d2a2fd58b0494a47a36def1dde4acad9dde4faf9ec2d6f7c9321D�( � fbdf0d211089d0219b49949e4bac45457c7c0de563ac494e01584ec1c65eb69d x d�� � x ��s�(Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�� }�!(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p� }g(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?� }�(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � r&�B � ��{�7)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�H�s� (Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#(Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) � =�,� � � �s�#)Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�)Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�!)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) � �9�> � {� w�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wq*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)�� w�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�w}*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�s� )Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�$wu*Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�#{�{*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�"{W*Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �!{�!*Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) m ��� \ � m � �+{�!+Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�*wC+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�)w�c+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�(w�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�'wq+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��&w�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�%w}+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�1w�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�0wq,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��/w�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�.wu+Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�-{�{+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�,{W+Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�8wU,Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�7wu,Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�6{�{,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�5{W,Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �4{�!,Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�3wC,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�2w�c,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�?{W-Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �>{�!-Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�=wC-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�<w�c-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�;w�-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�:wq-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��9w�-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�FwC.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Ew�c.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Dw�.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Cwq.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�BwU-Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Awu-Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�@{�{-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�Mwq/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��L{�.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�KwU.Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Jwu.Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�I{�{.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�H{W.Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �G{�!.Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�S{�{/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�R{W/Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �Q{�!/Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�PwC/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Ow�c/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Nw�/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �Z{�!0Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�YwC0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Xw�c0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Ww�0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��V{�/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�UwU/Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Twu/Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�aw�1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��`{�0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��_{�0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�^wU0Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�]wu0Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�\{�{0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�[{W0Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�hwU1Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�gwu1Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�f{�{1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�e{W1Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �d{�!1Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�cwC1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�bw�c1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�owu2Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�n{�{2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�m{W2Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �l{�!2Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�kwC2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��j{�1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��i{�1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�w{W3Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �v{�!3Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�uwC3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�t{k2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��s{�#2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��r{�2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��q{�2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�pwU2Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��}{�#3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��|{�3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{{�3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�zwU3Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�ywu3Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�x{�{3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��{�4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU4Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu4Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W4Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!4Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�~{k3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g� {W5Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!5Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�{c4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) e �r+��V��: � � e D�A � 911c67bf8be2e9d6a8d64cffde6ace72707962e5ee3df52066dc91049cea2aa1D�@ � d3c2e1e27a400829f10a9833f70edf0886d63ded954c2aca900c1d63fd6cb984D�? � 0304822e8138a928f86fc2b725ede94f0fe7ad348c85d005729fc71bac0ba3b2D�> � 4dc25e03c0a0a30babb3b4e2d1e9e2f11733686d656dc393fa7d1a62fc9f6fc3D�= � 05e34813e9daef9255f5e02eb2c3753c5308d070ffe9608abf8367fedeff8e2dD�< � 1aa586cd752451a887e64054c0eda881403fbc6b7e9c6079ce1e356a839fd225D�; � defc20ca4fb42304e9222b189cd76864191e45eb95df7eb3cb3ba3efd335419fD�: � f292ac03827b0d517e0873201d36bd5f7899da820fe99fba7955de328d3e2773D�9 � 6335456bae4a6531a1e5a588c09b5fa47d70ef61f6374951aca147a452b4eb02D�8 � b3204ebd71ad924147ec931e26a4e2b1126596abc3c240218c3fa6304427d289D�7 � 33233f04e60e9c664a7bf40da5737db125bcf521206e43d06261d80d1b4babe3D�6 � ebf8758838f5dc246c98cc6f76706eafa07a5083df17f4fbfa2489df5db98458D�5 � 9840fc5d69627a908ae29e24dc640f83ad9be6b88a9779079293c46cd56d1fa5 � �$� � ��{�#5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU5Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu5Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��{�6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU6Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu6Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W6Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�{c5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g� {W7Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers�� {�76Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��#{�#7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��"{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��!{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU7Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu7Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��*{�8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�)wU8Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�(wu8Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�'{�{8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��&{�77Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�%{c7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�${k7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?�0}�8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��/{�78Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�.{c8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�-{k8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��,{�#8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��+{�8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��6{�#9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��5{�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��4{�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�3wU9Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�2wu9Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�1{�{9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��={�#:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��<{�:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��;{�:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�:}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��9{�79Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�8{c9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�7{k9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��D}�!:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�C}g:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��B}�9:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�A}�:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��@{�7:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�?{c:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�>{k:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�^�z � �?�K}�;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��J{�7;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�I{c;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�H{k;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��G{�#;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��F{�;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��E{�;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) _ b�]�C � _ m�R{c<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�Q{k<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��P{�#<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��O{�<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��N}�!;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�M}g;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��L}�9;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��Xq�<Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��W}�!<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�V}g<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��U}�9<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�T}�<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��S{�7<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � x�rf � �?�^}�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��]{�7=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�\{c=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�[{k=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��Z{�#=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��Y{�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�F � b m�e{c>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�d{k>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��c{�#>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��bq�=Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��a}�!=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�`}g=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��_}�9=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) x d�� � x ��ks�>Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��j}�!>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�i}g>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��h}�9>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�g}�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��f{�7>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � r�l�` � �?�q}�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��p{�7?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�o{c?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�n{k?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��m{�#?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)� �ls�#>Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) e b�]�I � e m�x{c@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�w{k@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �vs�#?Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��us�?Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��t}�!?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�s}g?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��r}�9?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) x d�� � x ��~s�@Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}}�!@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�|}g@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��{}�9@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�z}�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��y{�7@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � r&�B � ��{�7APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�H� s� @Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �s�#@Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) � =�,� � � � s�#AStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s�AStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�!APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}gAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}�APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� g�h h�n i�u j�{ k� l� n� o� p� q� r�$ s�+ t�1 u�8 v�? w�F x�M y�S z�Z {�a |�h }�o ~�w �} �� �� �� �� �� ��# ��* ��0 ��6 ��= ��D ��K ��R ��X ��^ ��e ��k ��q ��x ��~ �� �� �� �� �� ��! ��( ��/ ��6 ��= ��C ��J ��Q ��X ��_ ��g ��m ��t ��z �� �� �� �� �� �� ��& ��- ��4 ��; ��B ��H ��N ��U ��[ ��a ��h ��n ��s ��y ��~ �� �� ě ś ƛ& Ǜ- ț3 ɛ: ʛA ˛H ̛O ͛W Λ] ϛd Лj ћp қw ӛ} Ԝ ՜ ֜ ٜ ڜ$ ۜ+ ܜ2 � �9�> � {�w�BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wqBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)�� w�BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x� w}BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H� s� AStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers e �r+��V��: � � e D�N � dca184c57d0913cdde1f9f39c446f2cad1f8daa197d290e0f0ee296dc3b345daD�M � 3c96054de3771395180ce2ef6da4dfcd565ee2d14573da0adad58ff76b63d77aD�L � 31deb0ef8475cdf1766d7273df81d1e80842c260ddc7eac34364361b4b00b974D�K � 2c72fd0a8014e13440ebde0c0ae037cea29cc8aa567b3723619486dc2040f9e5D�J � fc93fa73ee589349b26030b1fd56173975859786d624ddeaf826606e99c8b4f3D�I � 0f79393bd746c2a784972b1db928fdca74d0c0324e00a1859ceede81d1af8b93D�H � 8e85466eac6dba299f3f8211333d50827e103a67a8296884c3d1d1a87ce8a828D�G � 43570d8e293bd93001cb8c4cac3e4b2045b3024b7f3e08f4449735bfb9d206c6D�F � c779ed4a8b7cd8df613f47c214050d61ac25927ab97381ffb59944fb998585ffD�E � c9392783583e0597ccdfaf17dae6fee1b00c3d8da0cb91842328276045fb62a5D�D � 7b3d8994d78928ac66011137e013e2d788ecc7712d592ce7c08306cfd1728489D�C � 90290c5f2092315060a14a82b7d692c91c1f7a1b307ffd574420dbe3936b6177D�B � df8d2506c03d24e1a590d6879a32d25fc08c64674c5b3363908407344377e1dd � P�a� � � t�wuBTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WBArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!BArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wCBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�cBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) m ��� \ � m � �{�!CArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wCCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�cCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w�CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wqCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w�CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�w}CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�!w�DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wqDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)�� w�DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t� wuCTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {WCArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�(wUDTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�'wuDTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�&{�{DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�%{WDArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �${�!DArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�#wCDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�"w�cDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�/{WEArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �.{�!EArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�-wCEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�,w�cEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�+w�EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�*wqEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��)w�EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�6wCFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�5w�cFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�4w�FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�3wqFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�2wUETomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�1wuETomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�0{�{EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�=wqGPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��<{�FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�;wUFTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�:wuFTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�9{�{FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�8{WFArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �7{�!FArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�C{�{GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�B{WGArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �A{�!GArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�@wCGPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�?w�cGPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�>w�GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �J{�!HArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�IwCHPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Hw�cHPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Gw�HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��F{�GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�EwUGTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�DwuGTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�Qw�IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��P{�HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��O{�HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�NwUHTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�MwuHTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�L{�{HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�K{WHArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�XwUITomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�WwuITomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�V{�{IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�U{WIArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �T{�!IArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�SwCIPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Rw�cIPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�_wuJTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�^{�{JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�]{WJArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �\{�!JArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�[wCJPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��Z{�IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��Y{�IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�g{WKArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �f{�!KArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�ewCKPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�d{kJPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��c{�#JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��b{�JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��a{�JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�`wUJTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��m{�#KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��l{�KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��k{�KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�jwUKTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�iwuKTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�h{�{KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��t{�LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�swULTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�rwuLTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�q{�{LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�p{WLArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �o{�!LArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�n{kKPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�z{WMArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �y{�!MArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�x{cLPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�w{kLPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��v{�#LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��u{�LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � �� {�#MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��~{�MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�}wUMTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�|wuMTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{{�{MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��{�NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUNTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuNTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WNArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�{cMPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kMPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g� {WOArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers�� {�7NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {cNPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {kNPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) e �r+��V��: � � e D�[ � 6164453fc73f06d895ca8df581d46682883daa8322bdf6c511c25bd367caea15D�Z � 808073e5962f5fd81e0f89ce66bccad77dea549a509cf522580257f973f2dbe4D�Y � f5d02c79227db8a83ef923f005bb223131cc21a7d230cd462aa73916b2da8a5aD�X � 0ce460c4fec36484894f526d04090272961a86fa1cadfc07b79bf7eb7f0095f6D�W � e72e7e5054cec7dd0b5f52acc7183ddfcb107875c50ad6ef52f07a3785689966D�V � 1c21a4bf7dd0a9330e1d0f9859575f2ab5436413cea65a4a73f0b1991f3dd1ceD�U � 72ab9b204a4a984bb758843741ab139089f24553cac0336f08a7b1d1029030aeD�T � 9339fa8d6974fa8dfc8e28dbe75760c7c49d355183c0f71b2e5d7d7ea2db67dcD�S � f48ce4d917bdd2d6d5ec5a6aa18216b99e980b86d7308d6e535eafb38aa0fbfcD�R � f13d76a0cbcea5bf7f05f28bbb2ad0ca59d71e977f1c3f3c544f403d4f947794D�Q � a1b74be1d5a4cc7822e76a9f4d891bbacc535194cb8b1f766c6b04f42b2e443aD�P � e7ad03734c0fc0d4d420d177cc82478f12f8c7fcb1b49294d3f686e186915e9bD�O � 3d75be4567f3055d6aa45834620c4fdab40240d0eac958aa3b5401832cf284bb � �$� � ��{�#OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUOTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuOTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��{�PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUPTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuPTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��{�7OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cOPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kOPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?� }�PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {cPPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {kPPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��&{�#QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��%{�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��${�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�#wUQTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�"wuQTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�!{�{QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��-{�#RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��,{�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��+{�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�*}�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��){�7QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�({cQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�'{kQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��4}�!RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�3}gRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��2}�9RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�1}�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��0{�7RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�/{cRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�.{kRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�^�z � �?�;}�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��:{�7SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�9{cSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�8{kSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��7{�#SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��6{�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��5{�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) _ b�]�C � _ m�B{cTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�A{kTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��@{�#TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��?{�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��>}�!SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�=}gSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��<}�9SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��Hq�TStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��G}�!TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�F}gTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��E}�9TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�D}�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��C{�7TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � x�rf � �?�N}�UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��M{�7UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�L{cUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�K{kUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��J{�#UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��I{�UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�F � b m�U{cVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�T{kVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��S{�#VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��Rq�UStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��Q}�!UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�P}gUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��O}�9UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) x d�� � x ��[s�VStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��Z}�!VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�Y}gVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��X}�9VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�W}�VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��V{�7VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � r�l�` � �?�a}�WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��`{�7WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�_{cWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�^{kWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��]{�#WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)� �\s�#VStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) e b�]�I � e m�h{cXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�g{kXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �fs�#WStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��es�WStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��d}�!WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�c}gWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��b}�9WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) x d�� � x ��ns�XStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��m}�!XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�l}gXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��k}�9XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�j}�XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��i{�7XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � r&�B � ��s{�7YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�r{cYPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�q{kYPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�H�ps� XStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �os�#XStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) � =�,� � � �ys�#YStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��xs�YStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��w}�!YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�v}gYPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��u}�9YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�t}�YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) � �9�> � {�~w�ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�}wqZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��|w�ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�{w}ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�zs� YStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�wuZTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WZArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!ZArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wCZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�cZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) m ��� \ � m � � {�![Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w�[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w�[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�w}[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�w�\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w�\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�wu[Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W[Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers e �r+��V��: � � e D�h � c5debfa2df24c434430b601b89c524d821308d5207f350610e556a17360391b5D�g � 46f776adf7f88106a8e818889463dd616d261bb3462ec68346857a126aee742eD�f � 5105577688287233ec925ee639d92524c00f6f7490e2c5501c49eeb0f07cd511D�e � 802a7e88deb752607d0e6f0f44f099a1dfee4747bd86101389d25eccf2a9ebe8D�d � 7d49e6164c17d7539dfdc7b2354026cb06b6ee0a32b0c9218ac3d8960f348534D�c � f9e741d7af4fbcb102cf759697c858701bf8839ced08a5f62c9415ac5de9dda3D�b � 23886775cbbf0f0b980d7e700a1fa3cce9ae8149522a191554e770fe0acf1813D�a � 0d291da8585bc5dc3d72a81e494c64767eb04ba5a938f0847121edded2bcbdecD�` � 2974a1f35f8a1dbd3f46361c76fee7876402f098199e8208407a59471c892340D�_ � 5380ad090ba99c100379b2fc1cf54a62f85cdfe390b04b6e5e0fe4c213aa4661D�^ � 43a8791d748c2ca3cb5e8c1b6682319313b8373bb0e84e9e545ba09dc9e093bbD�] � 012bfa8eacdc2cdef0742df38d48737a13ab8171afc5020ef127dc81084a68b5D�\ � ffa04ef798ab2e5815f659306b1ff16a316bf5e5501788e7e0bdda2800e8afd0 P�a� � � d�wU\Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu\Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W\Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!\Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g� {W]Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!]Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w�]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w�]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�&wC^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�%w�c^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�$w�^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�#wq^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�"wU]Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�!wu]Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�-wq_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��,{�^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�+wU^Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�*wu^Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�){�{^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�({W^Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �'{�!^Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�3{�{_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�2{W_Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �1{�!_Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�0wC_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�/w�c_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�.w�_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �:{�!`Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�9wC`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�8w�c`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�7w�`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��6{�_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�5wU_Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�4wu_Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�Aw�aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��@{�`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��?{�`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�>wU`Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�=wu`Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�<{�{`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�;{W`Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�HwUaTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�GwuaTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�F{�{aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�E{WaArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �D{�!aArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�CwCaPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Bw�caPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�OwubTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�N{�{bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�M{WbArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �L{�!bArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�KwCbPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��J{�aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��I{�aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�W{WcArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �V{�!cArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�UwCcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�T{kbPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��S{�#bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��R{�bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��Q{�bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�PwUbTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��]{�#cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��\{�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��[{�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�ZwUcTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�YwucTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�X{�{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��d{�dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�cwUdTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�bwudTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�a{�{dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�`{WdArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �_{�!dArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�^{kcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�j{WeArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �i{�!eArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�h{cdPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�g{kdPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��f{�#dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��e{�dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��p{�#ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��o{�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��n{�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�mwUeTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�lwueTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�k{�{ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��w{�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�vwUfTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�uwufTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�t{�{fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�s{WfArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�r{cePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�q{kePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�}{WgArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��|{�7fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{{cfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�z{kfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��y{�#fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��x{�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��{�#gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wUgTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wugTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�~{�{gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � �� {�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wUhTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuhTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��{�7gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rf � ��{�iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�}�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{chPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {khPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) e �r+��V��: � � e D�u � 7266766000b531cf157295f474f17dcfde3f6c02dca1c64d75e027774c33560fD�t � 5b90034629bafae7fc40e3688bcd096834f9ce5de48a7f47ccb507c4f1c06c93D�s � ef23d81c590cbf657f32525eaf60a72a65cac4272b7cfa37677546ee5204deb1D�r � 44e365718f57aa02dbc0e6c0f884b3e6dd15e03acd28ab5154d917184b1d05ceD�q � 417df6c01f4373a219da10ea1df04e2565b5b27e4710818aa6718065c174f25fD�p � fad06e13ad887025495d47068294bf443e6c6209bbb16324fa1b3eb9ef5a885eD�o � 4cfa5141393a1004bc9d7885fee9a606293ee21216066238700f933afd5e4598D�n � 9339296f633515808554bf8032f56569d2f34d4c9a34b1d71f968cd560dfc9e2D�m � 64d39cb55589918f3c7cc7eebfd7ff6020fe1f126e87eb124bd3399e6a321938D�l � d39ddef78717bb9c60b1a73d0b5bd7070471daf3610288379a07921135392492D�k � ed2d48ef1a3e3a6e64fd20780277157eee5875df3e41cf640f9569e3437be284D�j � 8f9c62b62ee309f73ecbf3c62a51cb3d3b553a7505e51047083926355d41e0cdD�i � 898a882b2bfc15fc532825fa940804005432ab222c1efaacec472c1c18aa8c66 � x�rf � �?�}�iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{ciPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kiPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) _ b�]�C � _ m� {cjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {kjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��}�!iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}giPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��$q�jStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��#}�!jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�"}gjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��!}�9jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?� }�jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) n���+ � p�+}gkPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��*}�9kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�)}�kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��({�7kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�'{ckPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�&{kkPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��%{�#kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) n�Z�v � �?�2}�lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��1{�7lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�0{clPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�/{klPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �.s�#kStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��-s�kStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��,}�!kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) I b�]�I � �7s�#lStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��6s�lStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��5}�!lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�4}glPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��3}�9lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � �9�> � {�<w�mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�;wqmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��:w�mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�9w}mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�8s� lStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�BwumTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�A{�{mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�@{WmArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �?{�!mArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�>wCmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�=w�cmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�I{WnArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �H{�!nArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�GwCnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Fw�cnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Ew�nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�DwqnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Cw�nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�PwCoPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Ow�coPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Nw�oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�MwqoPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�LwUnTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�KwunTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�J{�{nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) # o�) � # {�Ww�pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��V{�oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�UwUoTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�TwuoTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�S{�{oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�R{WoArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �Q{�!oArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) P�a� � � d�^wUpTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�]wupTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�\{�{pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�[{WpArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �Z{�!pArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�YwCpPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Xw�cpPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�ewuqTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�d{�{qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�c{WqArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �b{�!qArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�awCqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��`{�pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��_{�pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � ���� � � g�l{WrArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �k{�!rArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�j{kqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��i{�#qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��h{�qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��g{�qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�fwUqTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��r{�#rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��q{�rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��p{�rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�owUrTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�nwurTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�m{�{rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��y{�sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�xwUsTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wwusTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�v{�{sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�u{WsArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�t{crPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�s{krPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake h x�rf h �z�{�{tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��~{�7sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�}{csPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�|{ksPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{{�#sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��z{�sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �"�� � m�{ctPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{ktPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUtTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wutTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) = d��, � = �� {�uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wUuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wuuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)�?�}�tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) x�rf � ��{�vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�}�uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cuPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kuPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) e �r+��V��: � � e D� � d97cd106cf9572dc73237ecabf174c9e7fd63f1831ecd180582edfe2ee993409D� � 29afed10faa9e050e9b84ade3202f51f3836b8d12289ddbf91099a716ea0838cD� � 8b2f892532b5441db04bb9a1d3ad5ae901202de8ca4725355c38b6ac842c3f60D� � 1a86cce369d4fa519dc82e79409e0ff8f027575c7dd5f588f2c3ca8ed78e840bD�~ � ec694ed3c68742fc4ff18e183f1eb03790bcac0cf47880b2b25ad5ac15c207f6D�} � b1c8c2c11e1df4cb77d96713a2285d4a6059f60b0d4baf4e2122da1910d62f6fD�| � 6277ccdddce2fa5ee1ecc12615c107ef3a280e1716b89c5bb60d515fecf84416D�{ � f985f476bdedc2f9a31dcd4fddfea63520d50b7d0201272e1df3ec06366409a3D�z � cbc4ea12d67dbb0aec7f99363fd0094c3b67059cbe632d6140c54b02128a4520D�y � 014f5bd144904dc6d27a7fe4b1819401d5f70ea084c8f04cf734fc30dd3fcfacD�x � 68dca12ceecda33b2f945d88f466ab32954ff89b462395ef6346d95a47ea375eD�w � 3f67c1b26c1f278f9f7675269681e617b83498e50e541a04d9a936a563d20506D�v � 4ff754e3b0277c5062fbf7116cde18b1ff4c39ef530dd4fecc189d221739fe28 � x�rf � �?�}�vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cvPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kvPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) G b�]�M � G q� {kwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {�wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�� }�!vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}gvPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��&}�!wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�%}gwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��$}�9wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�#}�wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��"{�7wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�!{cwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � x�rf � �?�,}�xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��+{�7xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�*{cxPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�){kxPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��({�#xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��'{�xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) J b�]�P � J q�3{kyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��2{�#yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��1{�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��0q�xStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��/}�!xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�.}gxPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��-}�9xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��9}�!yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�8}gyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��7}�9yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�6}�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��5{�7yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�4{cyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � {�ui � �?�?}�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��>{�7zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�={czPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�<{kzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��;{�#zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��:q�yStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) C b�]�I � C q�F{k{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��E{�#{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)� �Ds�#zStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Cs�zStepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��B}�!zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�A}gzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��@}�9zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��L}�!{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�K}g{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��J}�9{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�I}�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��H{�7{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�G{c{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � z�xl � �?�R}�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��Q{�7|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�P{c|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�O{k|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �Ns�#{Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Ms�{Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) I b�]�I � �Ws�#|Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Vs�|Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��U}�!|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�T}g|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��S}�9|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) q �@�4 q �?�\}�}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��[{�7}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�Z{c}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�Y{k}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�H�Xs� |Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers I b�]�I � �as�#}Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��`s�}Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��_}�!}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�^}g}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��]}�9}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � �9�> � {�fw�~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�ewq~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��dw�~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�cw}~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�bs� }Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�lwu~Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�k{�{~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�j{W~Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �i{�!~Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�hwC~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�gw�c~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) m ��� \ � m � �s{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�rwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�qw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�pw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�owqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��nw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�mw}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�yw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�xwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��ww��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�vwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�u{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�t{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�~{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�}{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �|{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�{wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�zw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){� w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) e �r+��V��: � � e D� � 61925baba4d4105a8e0a3e4da4f567f21fe8f341492cc4f0d809f774ead1a48bD� � 5acc0609a41df6553c86c09d5b59189c6442930ac603ef8674a29954ae4a3fd3D� � d6562a8f4c336171a1c63516de07f7e1ff14168c67b6aa0b7065c624836896f7D� � 8e8d874e43fcfca807986a24918c2f7b0c82f04d8a0ca32bc0d9523000380ae8D� � f59dc733e2e61cc262d571504ef9b62561aab27935f5cc432e2109e165936dacD� � 3997f8bf7bec69e2b9fc0ff0a33790347a77cd30140b40f7b9a36ae91591d36eD� � f9eddb4d96fec5e873cef47d5028d8ef2534235e25948f0010a17f3da79f7835D� � b2b7af7c6537a7e10965b0b999532c5684afc0b6d255efc2b50da0c38e3f168aD� � 9744361dc7129978289b5a40fcacd9f52369b57774ec2256bc3c078d4d6e8f03D� � f0c0b3f210497c3d560f42df97307f09afe0cd687c2e08ebc1cb7b03e28b8319D� � 54904b5dad92e58cb221e767835398cc72621bab301b2d3964a854595d9e6d60D� � f4a5bde79d6cee985d2f0ff8727b2428ec15fbdd03adaa9733b09f7b173c01c7D� � 87c1a04fd7037d13c6be98a8a975ef7a41eec66aa9031b781b61eabe9107ce9b { ��t�y { �z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �"{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�!wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){� w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�)w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��({��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��'{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�&wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�%wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�${�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�#{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�0wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�/wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�.{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�-{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �,{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�+wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�*w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�7wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�6{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�5{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �4{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�3wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��2{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��1{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�?{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �>{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�=wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�<{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��;{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��:{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��9{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�8wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��E{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��D{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��C{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�BwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Awu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�@{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��L{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�KwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Jwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�I{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�H{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �G{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�F{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�R{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �Q{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�P{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�O{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��N{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��M{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��X{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��W{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��V{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�UwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Twu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�S{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��_{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�^wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�]wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�\{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�[{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�Z{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�Y{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake of Sflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ޜ< ߜB �I �P �W �^ �e �l �r �y � � � � � � �& �, �3 �9 �? �F ��L ��R ��W ��\ ��a ��f ��l ��s ��y �� �� � � � �" �) �0 �7 �? �E �L �R �X �_ �e �k �r �y � � � � � � �$ �* �1 �8 �? �F �M !�T "�Z #�a $�g %�n &�t '�{ (� )� *� +� ,� .�! /�' 0�. 1�4 2�: 3�? 4�D 5�I 6�N 7�T 8�[ 9�a :�h ;�o <�v =�} >� ?� @� A� B� D�' E�- F�4 G�: H�@ I�G J�M K�S L�Z M�` N�f O�m P�t Q�{ R� � x�rf � g�e{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��d{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�c{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�b{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��a{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��`{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��k{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��j{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��i{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�hwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�gwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�f{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��r{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�qwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�pwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�o{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��n{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�m{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�l{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rf � ��y{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�x}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��w{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�v{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�u{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��t{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��s{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?�}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��~{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�}{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�|{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��z{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) _ b�]�C � _ m�{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y �� q��Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�� }�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p� }g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) n���+ � p�}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) n�Z�v � �?�}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) e �r+��V��: � � e D� � 5cbb74a2688de09192fd42f0956329cbe2c77efa2ec5ed4d5dd90ffcdd07f898D� � 5fe18b0b420aaf810ed5edcf1e1fd4fa93b6639632315bdd9348ecd11d6dac60D� � 4f490fc935e1622edd8f29833cff99546eda921facd62b71d30c95acefada869D� � e9c57b29838349dee4d11ec1d130cd0d7b3fb5df669721f178440fd42a507752D� � 5272f52e8e18d2702e48f4c1ff860fc6d052acf1543d9556f54efa55bbe31535D� � 913377ddeda7e9a87688016fb775cfe7ac678ed7b17cab277996497a766e6c67D� � bd2c5200554793773e752c3edacd8567d9f6db98bf2bc3399bb18086f6b771e8D� � 4d2dbd65fa67b8c23648a188f830340cc1da72b5dbc71795229022de0ff9720dD� � b524427963041d0c49036598caa6da026b76085863c14fdbec1466146a3b137aD� � 8df89d78d785928efa5b8d059e96ce33ffe0c9356663c9acb50ce3ec8c660d92D� � 0a8d2dafb528818f6b019015fbaf8cdd2fe3b6535d85da90f6a1db984b828e8eD� � 9e6c9b4224affd5105ee5ffe4355eb2e09681fde2148ce946769e1c4583a360bD� � bd0b8c4bd642bf2ddec4f60168cf63044086bf8e861160721a1ffb61a553229a I b�]�I � � s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)�� s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�� }�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p� }g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � �9�> � {�$w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�#wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��"w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�!w}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H� s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�*wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�){�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�({W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �'{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�&wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�%w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�1{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �0{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�/wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�.w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�-w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�,wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��+w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�8wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�7w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�6w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�5wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�4wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�3wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�2{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) # o�) � # {�?w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��>{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�=wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�<wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�;{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�:{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �9{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) P�a� � � d�FwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Ewu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�D{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�C{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �B{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�AwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�@w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�Mwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�L{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�K{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �J{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�IwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��H{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��G{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � ���� � � g�T{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �S{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�R{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��Q{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��P{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��O{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�NwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��Z{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��Y{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��X{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�WwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Vwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�U{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��a{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�`wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�_wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�^{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�]{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�\{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�[{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake h x�rf h �z�g{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��f{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�e{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�d{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��c{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��b{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �"�� � m�n{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�m{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��l{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��k{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��j{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�iwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�hwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) = d��, � = ��t{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�swU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�rwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�q{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)�?�p}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��o{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) x�rf � ��{{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�z}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��y{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�x{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�w{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��v{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��u{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?�}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�~{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��}{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��|{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) G b�]�M � G q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)��}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p� }g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?� }��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � x�rf � �?�}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) J b�]�P � J q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��q��Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) e �r+��V��: � � e D�) � afda0e4a1bc46470df4a4993f659a23e39c688752ccd5958b18e448a2d51f8d1D�( � 2eb85e9cbd29bebc8ce3cd107af06c6ae0f59fcc9a1056aa9226b8201c309a26D�' � 1612a4f04271f95f905580cfc4cc94695b1a11ade17803d000750d518bc0e3acD�& � f5a544c1c54d159d63ecf02b66555411db8230d7164937c969ee12412a7b3426D�% � 3f11637118683c18d64ab08e86467d90916b689368a1c29e9b095c9b7c8e2633D�$ � 26e0a18b1adcde25239343e4537dc1023fada0ed64e1d72e8b7a98ac795d90deD�# � 1b0d419b8d0ecbbebdaf88198d39462c8f0babefb9b711f46865cfaaf19e8ad2D�" � ffc1d3cbc957771182427d3972e83824283b43b4272f105619d32ec0195171ceD�! � b1efb67b99edebdc9042e5a1fc8376aaaf9c18620d6efda4ea95ea1b1ebc91c5D� � 3059b560a681189650e415ad7288004812bfd2e3c70a86249b7a9650f86f646eD� � e9972fdb7ca4cc3ff44e4f3ed37bfc724bfa5d7006592b775660808adeaacd37D� � 02e583fec180896fabf3422f69975545e3bd8d8460665b7044a186d0d5a4f817D� � c9ec93a5f3a15917b5ceeb7e19b67519e6e4ed8b7b2df39dc7999cf6d9f4c5e5 � ��1� � ��!}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p� }g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?� }��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � {�ui � �?�'}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��&{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�%{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�${k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��#{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��"q��Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) C b�]�I � C q�.{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��-{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)� �,s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��+s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��*}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�)}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��(}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��4}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�3}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��2}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�1}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��0{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�/{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � z�xl � �?�:}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��9{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�8{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�7{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �6s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��5s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) I b�]�I � �?s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��>s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��=}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�<}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��;}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) q �@�4 q �?�D}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��C{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�B{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�A{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�H�@s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers I b�]�I � �Is�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Hs��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��G}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�F}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��E}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � �9�> � {�Nw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Mwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Lw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�Kw}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�Js� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�Twu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�S{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�R{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �Q{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�PwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Ow�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) m ��� \ � m � �[{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�ZwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Yw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Xw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Wwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Vw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�Uw}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�aw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�`wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��_w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�^wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�]{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�\{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�hwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�gwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�f{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�e{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �d{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�cwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�bw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�o{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �n{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�mwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�lw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�kw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�jwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��iw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�vwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�uw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�tw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�swq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�rwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�qwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�p{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�}wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��|{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�{wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�zwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�y{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�x{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �w{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�~w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � � {�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) e �r+��V��: � � e D�6 � 05ba725d5c869c501d11a5e7d8127d0ad80d328b3e6147d560401baf1810497bD�5 � 516201be4c2a553028eb1f983417912a1b05f800b8989fcd30a55f89623a57b6D�4 � 1f800a61ea4b98c012916d84ad280573560d18bf31af0e459b43494dbf907a0dD�3 � edfa799d5c426dea0808d52912a4ed39b1534c8e7a5d3dc0a96937be66990f1cD�2 � 9ed16457c6de56bbd64bcca2285bd78861c098822395446cc3a1c693ffb69c77D�1 � bc1b8404e2707eba59addc78201595f614f7350f97cf87e924e6f6dbac90b3c3D�0 � 2953e2a9ba9042a9c5ebb93523d595d91f7367d8b83dc5b40a473e85572478b2D�/ � 0f0f20e5079748f9103ff3e0068108043ec9079822de5e46263c2c1f09b6dc0dD�. � c0a3bcd41e5beba5e539861177a8ed67f9626d4b21b11ab1b621770a53bf3137D�- � 43e8db14504b7b1b92c33224717880dd9e4ea6101787efd5f0da89bc9bf2d7a0D�, � ebbfadfcdd945e3b5ae40adb51fb4d444facc09bdd9f9cc989542bfed2cdee60D�+ � 5ca5234e59243cc5ced75e11bc9ad434a82d86c5fa5eab71a130bd3c3ae49334D�* � d4718c0bcf9365bfcd07e9c307952a12ae32802cbc6bde5707222c30c90cbb85 * ����% � * g�'{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �&{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�%wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�${k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��#{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��"{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��!{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��-{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��,{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��+{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�*wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�)wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�({�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��4{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�3wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�2wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�1{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�0{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �/{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�.{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�:{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �9{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�8{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�7{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��6{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��5{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��@{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��?{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��>{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�=wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�<wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�;{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��G{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�FwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Ewu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�D{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�C{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�B{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�A{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�M{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��L{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�K{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�J{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��I{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��H{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��S{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��R{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��Q{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�PwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Owu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�N{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��Z{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�YwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Xwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�W{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��V{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�U{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�T{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?�`}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��_{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�^{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�]{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��\{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��[{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��f{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��e{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��d{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�cwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�bwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�a{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��m{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��l{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��k{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�j}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��i{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�h{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�g{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��t}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�s}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��r}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�q}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��p{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�o{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�n{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�^�z � �?�{}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��z{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�y{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�x{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��w{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��v{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��u{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) _ b�]�C � _ m�{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��~}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��|}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��q��Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � x�rf � �?�}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�F � b m�{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��q��Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) x d�� � x ��s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � r�l�` � �?�!}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)� � s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) e �r+��V��: � � e D�C � 32f0185e8d6a9ab586922827519f1f38fb921fcaff260385904d3e61dd029d44D�B � 3d4d0d965fc073d950dd63507c1b1287648ef59c103d02cf09891c04bd99e930D�A � d0428b24d84b75519bce64c115f13b151f065712ac094dcd035dc9b63bbdc664D�@ � 0d953611a4ac63b86ca9bbf1ca0f35e9ef53094123f9e581e16919ed0393c690D�? � 40ceb41cf108321fdafc40bff1168cbc4f3e85a9ec271d6b55e946ed83697fb7D�> � 86d0b148abfa317696a046ac187cb479b242ea3f9ec769e6891130395ea172a9D�= � b3e23051f12c034b848268c08321e17a519c484640546a3ae90e7f99b36e7174D�< � 9ea26fb857c06b7e275a794a125b7880359b3911861019696cd35074ee1063d3D�; � ba3bba99a83841a7ef214b159627a5734756196a37510565d94c55e374ab6dc9D�: � 6c557f44383a709d2f0b400c2b77b432a965e5b7d4507ed1ecaf15fd92b55760D�9 � 932e0ad4e24e0525ba464544c1e8e10938e5fe172b6f926e51a12e6e2874b3edD�8 � 98cb7a80b5609722e12d6cd1a4562d0177f0672359013887fde3560ec9647c8fD�7 � 83e71037aa03cb56d8e5d9d0d2f0e410673cb723d0cf4f81dff15ea65830fd59 e b�]�I � e m�({c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�'{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �&s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��%s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��$}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�#}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��"}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) x d�� � x ��.s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��-}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�,}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��+}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�*}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��){�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � r&�B � ��3{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�2{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�1{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�H�0s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �/s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) � =�,� � � �9s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��8s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��7}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�6}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��5}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�4}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) � �9�> � {�>w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�=wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��<w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�;w}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�:s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�Dwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�C{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�B{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �A{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�@wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�?w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) m ��� \ � m � �K{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�JwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Iw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Hw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Gwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Fw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�Ew}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�Qw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Pwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Ow��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�Nwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�M{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�L{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�XwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Wwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�V{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�U{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �T{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�SwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Rw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�_{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �^{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�]wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�\w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�[w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Zwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Yw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�fwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�ew�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�dw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�cwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�bwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�awu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�`{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�mwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��l{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�kwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�jwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�i{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�h{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �g{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�s{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�r{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �q{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�pwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�ow�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�nw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �z{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�ywC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�xw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�ww��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��v{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�uwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�twu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�~wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�}wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�|{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � �� {�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��${��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�#wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�"wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�!{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q� {k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake e �r+��V��: � � e D�P � 566646f7e600ab8480640215904fa6db201c8d068ab3d6f8b7e348bf1ad1fd34D�O � b97a0e1f72d3fb43f706975f8e02ff0c130ef35fc6b4763eb18db88980fcde25D�N � 922e0899bd8cf38bf10d752a0549435a450f968969520194880a2484c23f16dfD�M � 61a1892c950bfc4a208064a4e1d8a4d65876ca4891cc730ee2b045f0f37f7794D�L � 9a717dd3b5eb02f5b812a44d5dde08db1964e2500b23bb7518df5c5083372f36D�K � 72e5967a31cc0ef1edc116fd15578c5e906edd2f9c5485a13dfaf37b191efb7cD�J � 07ef29e54e22c90b43aa4eb7133046f805b01fd91030eafee283ca4db4b35173D�I � b09f1f08469f4eb7a40b74f2e3cd25fa408b93d9213c6bdbc7ef21b1ee1ac8a9D�H � 1a1a8ca0b3ee1af1eea431740811a8a48d9564e81093de7dc250d46e47d3383fD�G � 1c0761e63af4f982fec4bf5ddbda7da44c1f6472883839db48386eaaac902785D�F � 9e951fe6f09cc5cf1402211e1232a2a92d029d66404daf66003bfc285052a41dD�E � 27e369dd165f3e4ff6b99227422febe5eb07cd10c6962ce831eade5566e16b91D�D � 22eb2233053a534b388c3ed8e39dfa1b4901d5e8b1e278a8c843c301c9db2488 x�rq g�*{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �){�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�({c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�'{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��&{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��%{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��0{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��/{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��.{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�-wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�,wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�+{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��7{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�6wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�5wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�4{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�3{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�2{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�1{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�={W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��<{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�;{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�:{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��9{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��8{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��C{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��B{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��A{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�@wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�?wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�>{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��J{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�IwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Hwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�G{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��F{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�E{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�D{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rf � ��Q{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�P}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��O{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�N{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�M{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��L{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��K{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?�W}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��V{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�U{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�T{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��S{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��R{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) _ b�]�C � _ m�^{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�]{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��\{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��[{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��Z}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�Y}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��X}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��dq��Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��c}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�b}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��a}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�`}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��_{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) n���+ � p�k}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��j}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�i}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��h{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�g{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�f{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��e{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) n�Z�v � �?�r}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��q{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�p{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�o{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �ns�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��ms��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��l}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) I b�]�I � �ws�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��vs��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��u}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�t}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��s}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � �9�> � {�|w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�{wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��zw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�yw}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�xs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�~wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�}w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) # o�) � # {�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) P�a� � � d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�%wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�${�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�#{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �"{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�!wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) e �r+��V��: � � e D�] � ca5ee1ff2a858d3eaf6bbed3a7c0421519183d99018689b9d2bfb4f8b2bdb122D�\ � 02b9f36207f55eecbaed6219e76bf38881875be99f49e0eca71ec75e6d3a7aa3D�[ � 235100bdba26a1af51c7f66f533d9318837d01dafa0c5e822245c8e0e5469978D�Z � 1efc77004111254487934c32f189a3b3fc8b1baf00a6e8350558183281f3855dD�Y � f6274f5c3cd73beb54d94229fd5b93b99b525f50921dae06b852ca0ada18b5b9D�X � 955704fe8de0bbcec645e44f2b204e4b12ce8b7bd2c8bfaba5e8968ee76f0568D�W � 74f4bb31b79790aa5a646612520c06cdd181b6e3e39b90a65dfc2634c1821260D�V � cf810cc7447c597839d02d5738646b8afcdb25edddcbd9cfbd3173d5a01cf3a3D�U � 089b94f213c170e875e90bb476e333d4b7d2491e323f4692f8e1513f78b4203eD�T � 8724fc26052010a537fbffaecee3413ede14b44646e26a456c4c8695f5f259c0D�S � 11e7a9eb9ad854ce3901deb76ff9ab3e462f87d56766b9cda133c1fbcc89d812D�R � 1a7fc39e7d481badbe2fe10dd40d290dcdefdeb4f572a8affee7880a751d5805D�Q � f7789c32ac34827df4b6c180e845361bb70aa1fcbc165a6c2a533559f2bc3f76 � ���� � � g�,{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �+{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�*{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��){�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��({��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��'{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�&wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��2{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��1{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��0{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�/wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�.wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�-{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� T� U� V� W�! Y�( Z�. [�3 \�9 ]�> ^�D _�K `�Q a�X b�_ c�f d�m e�s f�z g� h� i� j� k� l�$ n�* o�0 p�7 q�= r�C s�J t�Q u�W v�^ w�d x�k y�r z�w {�| |� }� ~� � �� ��% ��, ��2 ��9 ��? ��F ��M ��S ��Z ��` ��f ��m ��s ��y �� �� �� �� �� ��! ��( ��/ ��6 ��< ��C ��J ��P ��W ��] ��d ��i ��p ��v ��} �� �� �� �� �� ��% ��+ ��2 ��9 ��? ��F ��L ��S ��Z ��_ ��d ��j ��q ��x �� �� �� �� �� ��! ��( §. ç4 ħ: ŧA ƧH ǧO ȧV ɧZ N � ��= � N ��9{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�8wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�7wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�6{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�5{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�4{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�3{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake h x�rf h �z�?{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��>{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�={c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�<{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��;{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��:{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �"�� � m�F{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�E{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��D{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��C{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��B{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�AwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�@wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) d�� � � m�M{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�L{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��K{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��J{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��I{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�H}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��G{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) v d�� � v ��S{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��R}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�Q}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��P}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�O}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��N{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) n���+ � p�Z}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��Y}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�X}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��W{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�V{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�U{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��T{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) � n�W�s � ��`{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�_{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�^{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��]{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��\q��Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��[}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) � =�,� � � �fs�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��es��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��d}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�c}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��b}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�a}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) � �� � ��m}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�l}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��k}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�j}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��i{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�h{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�g{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake * z��% � * r�swq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��rw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�qw}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�ps� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �os�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��ns��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) { ��t�y { �z�y{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�x{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �w{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�vwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�uw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�tw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) q ��` q � � {�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�~w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�}w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�|wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��{w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�zwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) ��!�E � �,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers C ���2 � C ��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase { ��t�y { �z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) � �"��# � g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) � �$� � ��!{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��({��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�'wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�&wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�%{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�${W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �#{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�"{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake e �r+��V��: � � e D�j � 32af5400af5619a7e1f0c43f574170ae98cfd7cdc7e831f572b8d05530bd8913D�i � 850be6d438290af4b3c31805a40c2f8a88e4e751bafa1bb02b6b884736f80ef2D�h � 8317594c4733bc6fd9c13e0001d962d14e7bffb83ed66e6337f6b8a490067ea9D�g � a191bcc40fb33d21a6109e116756d8999e60adb5535583f65d05f51ff3047463D�f � f43e7c1792d357cd5fb1ac5a13e744a5ba50e7309444d7ab7d0149227755b575D�e � f6c854fef6008f3f063c3ed1c4f6a2e51821b5fe057282702dfcd15b7783bd41D�d � 87d3a6a27aa6179e43d778cec0765e166b68510a391d6eea5236b2e70d6d746bD�c � fdb600cfe62d10fb9b78089a4daae03dd3010232a321c952510faa95723d5a60D�b � dd3bfb74354db34116d2bb2b298b233f3d005acdb7709c1ea17dd9dede2e0566D�a � d1870d7298e93c62411f7b0b728df981e13f75ca9fdac1fb117b0e2d50d3b71fD�` � 2924951f311fafa5d17831ab4e1bd85bee2bd6d9ed591445149b5fd70152d077D�_ � 4552c0e9031fc5f990a165feb17e2cd243461f760cb80e75769c837d1052f193D�^ � 8908f58fb71fd39056da9b792dd69e358735856d43352a085ffea8b4b8f2039e # x�r� � # t�/wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�.{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�-{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�,{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�+{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��*{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��){��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) w ���� w ��6{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�5{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�4{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��3{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��2{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��1{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�0wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��<{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��;{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��:{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�9wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�8wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�7{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��C{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��B{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��A{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�@}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��?{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�>{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�={k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��J}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�I}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��H}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�G}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��F{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�E{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�D{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?�P}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��O{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�N{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�M{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��L{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��K{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�F � b m�W{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�V{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��U{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��Tq��Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��S}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�R}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��Q}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) x d�� � x ��]s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��\}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�[}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��Z}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�Y}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��X{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) r���/ � p�d}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��c}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�b}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��a{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�`{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�_{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �^s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341) � n�Z � x�iw}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�hs� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers� �gs�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��fs��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��e}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) ~ z��y � ~ g�p{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �o{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�nwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�mw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�lw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�kwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��jw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) b �� b �,�vw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�uw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�twq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��sw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�rwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�q{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) V ���2 � V r�}wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�|wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�{wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�z{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�y{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �x{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase { ��t�y { �z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�~w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � � {�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) L ��!�2 � L [�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers o�) � ��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) # n�i� � # d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) x�^�z g�%{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�${c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�#{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��"{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��!{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) e �r+��V��: � � e D�w � ad525efce24792177db9c59af54a5822206dc0ec6f5b18770062ca07e51ac4caD�v � f2cbc4c0d7d808554f9689174450c43f80db727c186bd3a1980494886a25212aD�u � 0834c02bc349eaabe64a4015d07ee7cbcf7776a68766e81cd93be0a58c7d5465D�t � 43f50cb7c44309253c847a258d592992e250678cda19887c482849bd67b447e3D�s � 461bf2c4280e37fa28f8577583cf56315e10dc6a8898497da766b5dffbdb1a56D�r � 797abce4232e5ed3353b7d0733cce5d5aea1134edf9acaa37b6028ef6bcfbc3dD�q � 6c2a1f394c23865716bd975554c638950ef8bb2b3efd23074290f41ebd724f20D�p � 2c9324974a8a0cabc911ea21fe71581d404b5d397c0c010f06880df10520bbf3D�o � a6c934448f1ad13c105abb9c4606317935bd853ff0ba1a80735013b194ee0643D�n � 41923a544cdeeda959457ff656dfdd7e871d90f2d4f234055c2bb0f1f3996609D�m � 4f2f74c8de47efbfeea14ccb4e01899a829a67121a6963532b82205d11eaea8bD�l � f59ceed71d088a420b5ecc67bc4a13df798f7d3d12556a27285fb4dfd594850eD�k � 74038c223561306541466c5407569dcc8055567f3cc9a56e7ec106015d2df942 � �$� � ��+{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��*{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��){��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�(wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�'wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�&{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��2{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�1wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�0wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�/{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��.{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�-{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�,{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rf � ��9{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�8}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��7{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�6{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�5{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��4{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��3{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?�?}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��>{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�={c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�<{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��;{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��:{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) _ b�]�C � _ m�F{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�E{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��D{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��C{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��B}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�A}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��@}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��Lq��Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��K}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�J}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��I}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�H}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��G{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) n���+ � p�S}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��R}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�Q}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��P{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�O{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�N{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��M{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) n�Z�v � �?�Z}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��Y{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�X{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�W{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake� �Vs�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��Us��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��T}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) I b�]�I � �_s�#�Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15ev@- Limit the amount of recursion possible in control channel (CVE-2023-3341)��^s��Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��]}�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�\}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��[}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � �9�> � {�dw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�cwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��bw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�aw}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�H�`s� �Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16f h@- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers � P�a� � � t�jwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�i{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�h{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �g{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�fwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�ew�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�q{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �p{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�owC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�nw�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�mw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�lwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��kw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�xwC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�ww�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�vw��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�uwq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�twU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�swu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�r{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) # o�) � # {�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��~{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�}wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�|wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�z{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �y{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) P�a� � � d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � ���� � � g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��!{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm� {c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake U x�rf � U ��(g�9�Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){�'g��Nick Clifton <nickc@redhat.com> 2.27-35.base\4��- Stop strip crashing when removing .comment sections. (#1644632)��&{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�%{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�${k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��#{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��"{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) e �r+��V��: � � e D� � 8e35267d29e2ee8a7d9678927b89dd4a07137e32a7f920844428b1f94aaf2c97D� � 0f2b2ab9e05c1447b23d28c2912f8057c494168f4eed17e7d868e5970436722dD� � 580edd83e305e9b58fb0cceca959a21a8c59ccd3bc075f075211019108f73863D� � ebf604edce00a3a3778207eeaac06a3de226dbf62bfb987ed00584aa8d736ea1D� � d9c97d1412cfdb3b24b2aca08bec9bed63be4db9461f19ba0eef840ad48dc19eD� � 9e472e05a5fca129f0efc2c81b7fc14f5daa96935b5c693cead447474422f17fD�~ � 6f1a8e6e9202d70c194d4aaed3c034d719a85eb53ac63f8c6235756a9646a2faD�} � e51d2de57b856312d8eb1bbf6ee6b7ac8f910ebf5d7e0b516012d5d9c31c7853D�| � 64ec5a21e706505bd67ed2ff5da8b90fcfb71ea07550d90a777323f49c8ee5d9D�{ � f17b58dd383483f1592c8c3c0bf814ed80d208d19a254620ec541a14c9f5f144D�z � 20887cda88d458e236a1d13d68fb01b10056907594d573f0342d40b9bd677d37D�y � b88c8339f9ad90d0855cda0072a67860549759e8870cc9abc61555e4d4ef4f61D�x � db4dac1347f0a7c37ce54b990ae4be455c6c016e54d0a315f1e2cbefcefd3073 � � zy � � �.g�W�Nick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)��-g�?�Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h�,gm�Nick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)��+g�7�Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s�*g��Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){�)g��Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587) � � v � � s�4g��Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){�3g��Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587)��2g�9�Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){�1g��Nick Clifton <nickc@redhat.com> 2.27-35.base\4��- Stop strip crashing when removing .comment sections. (#1644632)��0o��Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m�/g�u�Nick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892) R nm� � R ��:o��Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m�9g�u�Nick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892)� �8g�W�Nick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)��7g�?�Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h�6gm�Nick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)��5g�7�Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884) h ��q�i � h ��Ag�?�Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h�@gm�Nick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)��?g�7�Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s�>g��Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){�=g��Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587)��<g�9�Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){�;g��Nick Clifton <nickc@redhat.com> 2.27-35.base\4��- Stop strip crashing when removing .comment sections. (#1644632) + ^m��. � + W�HeM�Josef Ridky <jridky@redhat.com> - 0:1.8.18-4X�+�- Fix RPMDiff issues and rebuild�%�Ge�g�Josef Ridky <jridky@redhat.com> - 0:1.8.18-3X��@- Fix issues with warning: dereferencing type-punned pointer will break strict-aliasing rules from RPMDiffR�FeC�Josef Ridky <jridky@redhat.com> - 0:1.8.18-2X���- Fix issue in file sources_�Ee]�Josef Ridky <jridky@redhat.com> - 0:1.8.18-1X� @- New upstream release 1.8.18 (#1398658)��Do��Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m�Cg�u�Nick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892)� �Bg�W�Nick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085) D ���'� � D R�OeC�Josef Ridky <jridky@redhat.com> - 0:1.8.18-2X���- Fix issue in file sources� �Nk�S�Pavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a�{�- Protect against negative values to memmove that caused "ipmitool sol activate" to crash against an IBM DataPower appliance (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519) Cherry-picked from upstream PR#78.i�Msc�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_�@- Disable -fstrict-aliasing (RPMDiff issue)^�LsM�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F�- Backport fix for CVE-2020-5208o�Ke}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy��- Remove debug prints shown without -v option (#1483163)��Je�=�Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y�{�- Hide unrequested verbose output (#1483163) - Fix doc for check input values (#1495098)o�Ie}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-5X�s�- Remove RPMDiff fix file (#1439269) related to #1398658 � W����$ � i�Vsc�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_�@- Disable -fstrict-aliasing (RPMDiff issue)^�UsM�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F�- Backport fix for CVE-2020-5208o�Te}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy��- Remove debug prints shown without -v option (#1483163)��Se�=�Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y�{�- Hide unrequested verbose output (#1483163) - Fix doc for check input values (#1495098)o�Re}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-5X�s�- Remove RPMDiff fix file (#1439269) related to #1398658W�QeM�Josef Ridky <jridky@redhat.com> - 0:1.8.18-4X�+�- Fix RPMDiff issues and rebuild�%�Pe�g�Josef Ridky <jridky@redhat.com> - 0:1.8.18-3X��@- Fix issues with warning: dereferencing type-punned pointer will break strict-aliasing rules from RPMDiff �� � �<�Z��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}��Y�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�w�Xg� �Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-11d��- Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569� �Wk�S�Pavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a�{�- Protect against negative values to memmove that caused "ipmitool sol activate" to crash against an IBM DataPower appliance (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519) Cherry-picked from upstream PR#78. � I � �K�\}��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3�[��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t�^��g�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i�]��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-�`��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M�_���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} ? �� ? �K�c}��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� �b��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L�a���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t�e��g�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i�d��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-�g��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M�f���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � �i��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L�h���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 2� ��k��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ԃJ�j���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � = � �M�m���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?�l��{�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � O � �L�o���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-�n��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � ��r��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f J�q���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� �p��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] = = �?�s��{�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d�t��E�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] r -r �7�v��k�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O�u���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} � � �P�x�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ݅^�w��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] ; ; �9�z��o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow �t�y��e Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] { � { � �|��7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �X�{��- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f�}��I Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] p p � �~�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o���Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q� ��] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] � � �d���ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] r -r r �|���uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7���kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} Z �}���wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"���ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] # � � # �?� ��{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4� ��eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^���9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} Z �B� ��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"� ��ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|� ��uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}���wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] � � � �4���eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^���9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b���ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~���yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} ( o�( �"���ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ���7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � � � � �}���wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4���eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^���9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b���ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~���yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} o� �+� � �MRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� � ��7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]�� ��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � � ��7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f� ��IAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] p p � �!��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o�"��YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q�#��]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] / �/ �R�%�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ��^�$��7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} - - �O�&��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ( � ��(��1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T�'��#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] e �r+��V��: � � e D� � 6652fd59e1328ff5e8f2141d6e091685a4e2cb80366a0f729537fb40a17779b8D� � 168cb87176ec6a7a6805dcccc50c34a22945c1ebfd027164ff0028a1a140a637D� � 388ece9ac8d1f44fa207868af7af9df39a1479ce72301c159bfb9ed3f436fd61D� � f2dc09932d5afec99bdc35c39f858385a06e600f3b989133d348ed00959ba429D� � 19575eb2feb5e29ed339c078e462e2a4ac7a44f0888328185fc248a30681b82eD� � 5b19e42e03ab5ffdc24e71ec6c71dd0d4c8a557e482b142cb58bd7eaf529174aD� � e07580dc20cee29ddae2c26b7d4782a6e7671477d7f4ae210d2cef6cc71555cbD� � 8b60c6a9194e57ad101ad2a28015f644b915aa5c958a5f8b0e68def14394fa13D� � 479b38bee7280885a7df789a1472c2d43e1a0103f8607f0e6d3fb26c2ae13423D� � bfe191b783a11c70daf05fb86e81e2e36d80b7dec5eb2243fa223700ce330824D� � a6119606e76fc09a37585914c2063026064b1b979d9cffcf71712c2218b4c3c2D� � d8f18b1da519f3d475ad00269e3908ecb8abedc91f0754a3a8a6aa8b624b04ddD� � f1ba2741b87027c8c0f29b9262bb396c142986c3ad3c68f88e90f34cb028b6de C � C � �*s�Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �J�)s�#Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] E E �D�,s�Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o�+s�mJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] e h�e �j�/s�cJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��.s�1Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��-s�7Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 6 ��1��+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F�0s�Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � �3s�Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �^�2��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] of Uflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ̧^ ͧ` Χc Чe ѧg ҧi ӧk էm ֧o קr ٧s ڧt ۧv ܧx ߧz �| �} �~ � � � � � � � � � � � � � � �� �� �� ��! ��" ��# ��% ��& ��( �* �, �/ �1 �3 �5 �8 �: �; �= �? �A �B �C �D �E �F �H �I �J �K �L �M �O !�Q #�R $�S %�T &�U (�V )�X *�Y +�Z ,�\ -�] .�_ /�a 0�b 1�c 2�d 3�e 4�f 5�g 6�h 8�j 9�l :�n <�p =�r >�s ?�t @�u A�w B�y C�z D�{ E�| F�} G� H� I� J� K� L� M� O� P� Q� R� T� to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] E E �D�5s�Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o�4s�mJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] e h�e �j�8s�cJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��7s�1Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��6s�7Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 6 ��:��+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F�9s�Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^�;��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] y � y �^�=��7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!�<��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O�?��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R�>�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE A ( A �[�A��1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T�@��#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�B��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�C��cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 2 2 �J�D��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 2 2 �J�E��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��F��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend A ( A �[�H��1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T�G��#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�I��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�J��cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 2 2 �J�K��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 2 2 �J�L��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��M��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend M � M �/�O��YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|�N��sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] b Ib �[�Q��1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 "�3�P��aAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�R��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�S��c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 2 2 �J�T�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 2 2 �J�U�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��V�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend ' M � M �/�X��Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|�W��s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] I I �3�Y��a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) B B �:�Z��o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] M � M �/�\��Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|�[��s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] I I �3�]��a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 6 B 6 ��_�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:�^��o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] 1 �1 ��a�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@�`��{ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) > > �>�b��w Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ��c��# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} / / �M�d�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] u u ��e�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] > > �>�f��w Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ��g��# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} / / �M�h�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] , ��j��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H�i�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP 7 U { U �"�l��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]��k��} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] . � . ��n��- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1�m��] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] , ��p��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H�o�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP ; U { U �"�r��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]��q��} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1�s��] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � �t�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ��u�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] 0 � 0 �2�w��_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��v��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � ] � ��y��} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� �x��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"�z��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1�{��] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � �|�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ��}�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] 0 � 0 �2���_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��~��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] ]� � ���9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"���? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� � ��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] 0 � 0 �2���_Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]����'Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] ]� � � ��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"���?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ���9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 3 3 �I� �� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} n n �� �� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 N p p � � ��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i� ��QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Z� � ���9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"���?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 3 3 �I��� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} n n ���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 S �i���QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_���=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] E E �7���mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!���ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7���mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} n n ���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 Y �i���QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_���=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] E E �7���mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!� ��ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7���mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] r fr �p� ��_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]�� ��+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} "� ��!��+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n� ��[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig a�Z� ��3Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] bet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush cif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r deform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � . � �n�$��[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig f�Z�#��3Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p�"��_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] get() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush hif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r ieform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] d }d � �&��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 k��%��}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � @ � ��(�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<�'��wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} & �S�& ��,s�1Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��+s�7Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%�*��IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� �)��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} e �r+��V��: � � e D� � 766b6de38798e8e6035b4c0b18df36607cccc2e988be356ea2d9eb9c21de9b6cD� � ce3a408dfe9ac91c4e9fefe4168ef2cbd9d6d18a92f2dfd2e36b2b7af8c8b103D� � e2dd1e90386216ad54e0f6e9509f96a4314819f96abc9b8ea88ffbb03f05dd03D� � a8d4bf67c5aec05b8881b57f4ec80fbc832c77a1fabb65bb68b376c269b759d3D� � 85de1b747c97e7d16a742f3f0789c4d8761e3b44c28ff437bc8b47499a9132adD� � 61a258f5eb7c2c013c4eeb36791fdc7dc8b813c04b4ae5b0d1a31faa435a58acD� � 04b4fe240bbb7def555afa21959f623f37179a6993d0e6a57f592f05ab3f531bD� � 66cc35a05dd83f4129f6b3bb4f774d59fc607704c381b660b909ab3e3776ab96D� � 7284d6fec357299a1772944305ca58f5d48637a3031733bcdd30849ec50f7a98D� � e9db6345b34c115b15bd297bcda0f0680ee1a37cf51adeb1477e16e232d6f289D� � 81df5804e78ba7e49ce4ceb11f4b7c514d4f06d0ad146b950993c6cb77e58dfaD� � 0dac2946a3cac243477b0ac6573b491a15bcd751bbfaa32b92535f850f10cf3fD� � 2d58b75f307b928bfae35e0818fe5449c542ed611f46c2ba4663d50f304c0295 � � � �F�.s�Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j�-s�cJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ��/��+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P�1�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol r�^�0��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] ; ; �9�3��oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow u�t�2��eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command s erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 5 �5 �n�5��[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig w�X�4��-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} xet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush yif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r zeform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] d }d � �7��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 |��6��}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � @ � ��9�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<�8��wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} S �S �%�;��IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� �:��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\�<��7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT Q Q �+�=��URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ) ) �S�>��%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � vr � �%�A��IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� �@��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}��?�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\�B��7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � Q Q �+�C��URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ) ) �S�D��%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) s �D s �M�G��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%�F��IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}��E�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 8 8 �D�H��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ) ) �S�I��%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) s �D s �M�L��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%�K��IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}��J�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 8 8 �D�M��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ' w ' �L�O��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]��N�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � e�� � �R��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]��Q��)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]��P��-Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] ' w ' �L�T��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]��S�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � e�� � �&�X��KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� �W��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]��V��)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]��U��-Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] z z ��Z��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l�Y��WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�[��'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � 7 _Q' 7 �l�_��WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&�^��KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� �]��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� �\��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] j j ��`��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�a��'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � I _ I ��c��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �b��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � Q* � �B�f��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �e��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+�d��URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} P ��P ��i��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l�h��WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&�g��KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] of flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� V� W� X� Z� [� \� ]� ^� _� `�! e�$ j�& l�( m�, o�. p�/ q�1 t�3 v�5 {�7 }�9 ~�; ��< ��= ��> ��A ��B ��C ��D ��G ��H ��I ��L ��M ��O ��R ��T ��X ��Z ��[ ��_ ��` ��a ��c ��f ��i ��j ��l ��o ��q ��r ��t ��w ��x ��y ��{ ��} ��~ �� �� �� ª ê Ī Ū ƪ Ȫ ɪ ʪ ˪ ͪ Ϊ Ъ Ѫ! Ҫ$ Ӫ' Ԫ) ֪+ ת. ܪ0 ު2 ߪ5 �< �F �P �Z �d �n �v �{ � � � � � � �# �& �) ��* ��+ �- �. �1 �2 �3 �5 �6 �7 �> �D cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�j��'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � I _ I ��l��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �k��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � Q* � �B�o��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �n��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+�m��URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ��q��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L�p��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�r��'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � I _ I ��t��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �s��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � Q* � �B�w��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �v��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+�u��URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L�x��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] ' ' �U�y��)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � �{��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ���z�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} j �j �L�}��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B�|��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] ' ' �U�~��)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i� ��QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} < < �@���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � c � �7���mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc �����1Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} y �y �L���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3���eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] ' ' �U���)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i���QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} < < �@� ��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � c � �7� ��mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc Dž� ��1Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} H �+H �_���=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�� ��3Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3� ��eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i���Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} < < �@��� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � c � �7���m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ̅���1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �+H � � ���7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_���= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]����3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3���e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] Y � Y ����1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � =h � �_� ��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�� ��3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3���e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7���m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � `VK � �<�!��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}�� �� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�� �� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� � ��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � If � � �$��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_�#��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3�"��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] + ��+ �<�'��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}��&�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]��%�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � I � �K�)}� Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3�(��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t�+��g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i�*��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � �� ��.s� Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono ڊ �-s�! Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean قM�,�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} e �r+��V��: � � e D�+ � d56f208cb0a3f9404c7aa65a34d04ff637f76d4517d2f68c4c63ec940a0806a5D�* � 04dce9028a87d078c3036031ae186db04fd35a585bd35d7aa2fcc7c8300830edD�) � a99bb11d5187d473fbf1ceddf45f95459a860863d190605924743cdb4f34261bD�( � 7c67eafa7cee5c39a41ff1aeb7d5cd4d764c1967ad0cc0795ad34e1d63727f0eD�' � 58d8a7b6d0fdb9777df76fd29a92c1c249ab8fe602e217d454e4b89dd8a82452D�& � d30f35b56aec811e1b348312a8f58d2e793a4c89f8e25ac9155a5e74a0d04b90D�% � 1b927fc58d94ad45dc78d0926b1fb83cae72958110a6ebfa24f75a5d5a9a4b4dD�$ � 37c1fc32da75405bdcca093c9fce198c021c7868450f7b272aed38def708857dD�# � 518ebaac264e510836e723892b0b9982787bf6b242d9843e5ab09ecc5c9f642aD�" � 4857df90d4f9aa3520255aef6c5bdbe887f7cdaae0d006c15b15db7c418b372fD�! � ad182b2b1a28f50e4030294d1ad1de624300da1440a08ecc9180070cc3c2b076D� � 149c020747f7a669eb88245d5064fa806ac7462e9cdd3a6c05414ff08bdd43e7D� � 86101a94927cf01319d801575aa4ea26e63efa577a5431856e0329f06a994596 up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] C � C � �0s� Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ݆J�/s�# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] E E �D�2s� Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o�1s�m Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] e h�e �j�5s�c Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��4s�1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��3s�7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 6�w( � v Z�<iO Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�;]? Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�:_e Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�9]? Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�8_c Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�7_Y Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)�F�6s� Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] f �?��&�u � f Z�FiO!Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�E]?!Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�D_e!Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�C]?!Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�B_c!Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�A_Y!Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)V�@aO David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�?i[ Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�>]] David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�=i[ Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 f �?��&�u � f Z�PiO"Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�O]?"Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�N_e"Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�M]?"Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�L_c"Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�K_Y"Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)V�JaO!David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�Ii[!Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�H]]!David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�Gi[!Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 f �?��&�u � f Z�ZiO#Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�Y]?#Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�X_e#Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�W]?#Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�V_c#Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�U_Y#Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)V�TaO"David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�Si["Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�R]]"David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�Qi["Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 f �?��&�u � f Z�diO$Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�c]?$Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�b_e$Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�a]?$Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�`_c$Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�__Y$Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)V�^aO#David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�]i[#Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�\]]#David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�[i[#Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 f �?��&�u � f Z�niO%Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�m]?%Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�l_e%Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�k]?%Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�j_c%Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�i_Y%Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)V�haO$David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�gi[$Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�f]]$David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�ei[$Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 � �?��5�A � ��v��&Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildW�ucO&Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T�- Include URL to the license text��t��&Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�sk/&Tom Callaway <spot@fedoraproject.org> - 1.9.1-1O�R�- update to 1.9.1V�raO%David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�qi[%Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�p]]%David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�oi[%Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 � �F& � � M�{_?&Daniel Mach <dmach@redhat.com> - 1.10.0-3R�U�- Mass rebuild 2014-01-24M�z_?&Daniel Mach <dmach@redhat.com> - 1.10.0-2R�k�- Mass rebuild 2013-12-27� �ye�U&Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q��- New upstream release 1.10 - Obsolete upstreamed patches - Amend the multilib patch, there's no need to patch configure since we are running autoreconf anyways - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES��xc�%&Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf��- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally�/�wc�}&Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf��- Apply a patch by Stephen Gallagher to patch autoconf, not configure to allow optflags to be passed in by build environment - Run autoreconf before configure - git rm obsolete patches - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR L [ s L �/�c�}'Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf��- Apply a patch by Stephen Gallagher to patch autoconf, not configure to allow optflags to be passed in by build environment - Run autoreconf before configure - git rm obsolete patches - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR�� ��'Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildW�cO'Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T�- Include URL to the license text��~��'Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�}k/'Tom Callaway <spot@fedoraproject.org> - 1.9.1-1O�R�- update to 1.9.1�!�|q�S&Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d��@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z] , yY � � , ����(Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�k/(Tom Callaway <spot@fedoraproject.org> - 1.9.1-1O�R�- update to 1.9.1�!�q�S'Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d��@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]M�_?'Daniel Mach <dmach@redhat.com> - 1.10.0-3R�U�- Mass rebuild 2014-01-24M�_?'Daniel Mach <dmach@redhat.com> - 1.10.0-2R�k�- Mass rebuild 2013-12-27� �e�U'Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q��- New upstream release 1.10 - Obsolete upstreamed patches - Amend the multilib patch, there's no need to patch configure since we are running autoreconf anyways - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES��c�%'Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf��- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally 2 � �R 2 � � e�U(Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q��- New upstream release 1.10 - Obsolete upstreamed patches - Amend the multilib patch, there's no need to patch configure since we are running autoreconf anyways - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES�� c�%(Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf��- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally�/� c�}(Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf��- Apply a patch by Stephen Gallagher to patch autoconf, not configure to allow optflags to be passed in by build environment - Run autoreconf before configure - git rm obsolete patches - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR�� ��(Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildW� cO(Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T�- Include URL to the license text � �`�m�y � ����)Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildW�cO)Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T�- Include URL to the license text����)Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�k/)Tom Callaway <spot@fedoraproject.org> - 1.9.1-1O�R�- update to 1.9.1�!�q�S(Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d��@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]M�_?(Daniel Mach <dmach@redhat.com> - 1.10.0-3R�U�- Mass rebuild 2014-01-24M�_?(Daniel Mach <dmach@redhat.com> - 1.10.0-2R�k�- Mass rebuild 2013-12-27 � �F& � � M�_?)Daniel Mach <dmach@redhat.com> - 1.10.0-3R�U�- Mass rebuild 2014-01-24M�_?)Daniel Mach <dmach@redhat.com> - 1.10.0-2R�k�- Mass rebuild 2013-12-27� �e�U)Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q��- New upstream release 1.10 - Obsolete upstreamed patches - Amend the multilib patch, there's no need to patch configure since we are running autoreconf anyways - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES��c�%)Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf��- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally�/�c�})Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf��- Apply a patch by Stephen Gallagher to patch autoconf, not configure to allow optflags to be passed in by build environment - Run autoreconf before configure - git rm obsolete patches - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR z [�:�w z �� i�?*Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76] �- Update to CKBI 2.32 from NSS 3.44 - Removing: - # Certificate "Visa eCommerce Root" - �[� gS*Kai Engert <kaie@redhat.com> - 2018.2.22-70.0Z��- Update to CKBI 2.22 from NSS 3.35[� cW*Kai Engert <kaie@redhat.com> - 2017.2.20-71Z �@- Update to CKBI 2.20 from NSS 3.34.1b� ce*Kai Engert <kaie@redhat.com> - 2017.2.18-71Y��@- Update to CKBI 2.18 (pre-release snapshot)�?� c� *Kai Engert <kaie@redhat.com> - 2017.2.16-71Y�A@- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions, Mozilla removed code signing trust from all CAs (rhbz#1472933)[�cW*Kai Engert <kaie@redhat.com> - 2017.2.14-71Y.�- Update to CKBI 2.14 from NSS 3.30.2�!�q�S)Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d��@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z] # Certificate "AC Raiz Certicamara S.A." - # Certificate "TC TrustCenter Class 3 CA II" - # Certificate "ComSign CA" - # Certificate "S-TRUST Universal Root CA" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - Adding: - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "GTS Root R1" - # Certificate "GTS Root R2" - # Certificate "GTS Root R3" - # Certificate "GTS Root R4" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "emSign Root CA - G1" - # Certificate "emSign ECC Root CA - G3" - # Certificate "emSign Root CA - C1" - # Certificate "emSign ECC Root CA - C3" - # Certificate "Hongkong Post Root CA 3" 9 � � 9 }�#i�*Bob Relyea <rrelyea@redhat.com> - 2021.2.50-71`��- Update to CKBI 2.50 from NSS 3.67 - version number update only�N�"i�5*Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71`�P@- Update to CKBI 2.48 from NSS 3.66 - Removing: - # Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - # Certificate "G �e�!i�c*Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79^�y�- Update to CKBI 2.41 from NSS 3.53.0 - Removing: - # Certificate "AddTrust Low-Value Services Root" - # Certificate "AddTrust External Root" - # Certificate "UTN USERFirst Email Root CA" - # Certificate "Certplus Class 2 Primary CA" - # Certificate "Deutsche Telekom Root CA 2" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "Swisscom Root CA 2" - # Certificate "Certinomis - Root CA" - Adding: - # Certificate "Entrust Root Certification Authority - G4" - fix permissions on ghosted files. �eoTrust Global CA" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root CA" - # Certificate "Sonera Class 2 Root CA" - # Certificate "Taiwan GRCA" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "Trustis FPS Root CA" - # Certificate "EE Certification Centre Root CA" - # Certificate "LuxTrust Global Root 2" - # Certificate "Symantec Class 1 Public Primary Certification Autho rity - G4" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G4" - Adding: - # Certificate "Microsoft ECC Root Certificate Authority 2017" - # Certificate "Microsoft RSA Root Certificate Authority 2017" - # Certificate "e-Szigno Root CA 2017" - # Certificate "certSIGN Root CA G2" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "NAVER Global Root Certification Authority" - # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" - # Certificate "GlobalSign Secure Mail Root R45" - # Certificate "GlobalSign Secure Mail Root E45" - # Certificate "GlobalSign Root R46" - # Certificate "GlobalSign Root E46" - # Certificate "GLOBALTRUST 2020" - # Certificate "ANF Secure Server Root CA" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" w tw ��&i�?+Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76] �- Update to CKBI 2.32 from NSS 3.44 - Removing: - # Certificate "Visa eCommerce Root" - �[�%gS+Kai Engert <kaie@redhat.com> - 2018.2.22-70.0Z��- Update to CKBI 2.22 from NSS 3.35��$i�)*Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72a@��- Fix expired certificate. - Removing: - # Certificate "DST Root CA X3" # Certificate "AC Raiz Certicamara S.A." - # Certificate "TC TrustCenter Class 3 CA II" - # Certificate "ComSign CA" - # Certificate "S-TRUST Universal Root CA" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - Adding: - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "GTS Root R1" - # Certificate "GTS Root R2" - # Certificate "GTS Root R3" - # Certificate "GTS Root R4" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "emSign Root CA - G1" - # Certificate "emSign ECC Root CA - G3" - # Certificate "emSign Root CA - C1" - # Certificate "emSign ECC Root CA - C3" - # Certificate "Hongkong Post Root CA 3" 9 � � 9 }�)i�+Bob Relyea <rrelyea@redhat.com> - 2021.2.50-71`��- Update to CKBI 2.50 from NSS 3.67 - version number update only�N�(i�5+Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71`�P@- Update to CKBI 2.48 from NSS 3.66 - Removing: - # Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - # Certificate "G ��e�'i�c+Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79^�y�- Update to CKBI 2.41 from NSS 3.53.0 - Removing: - # Certificate "AddTrust Low-Value Services Root" - # Certificate "AddTrust External Root" - # Certificate "UTN USERFirst Email Root CA" - # Certificate "Certplus Class 2 Primary CA" - # Certificate "Deutsche Telekom Root CA 2" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "Swisscom Root CA 2" - # Certificate "Certinomis - Root CA" - Adding: - # Certificate "Entrust Root Certification Authority - G4" - fix permissions on ghosted files. �eoTrust Global CA" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root CA" - # Certificate "Sonera Class 2 Root CA" - # Certificate "Taiwan GRCA" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "Trustis FPS Root CA" - # Certificate "EE Certification Centre Root CA" - # Certificate "LuxTrust Global Root 2" - # Certificate "Symantec Class 1 Public Primary Certification Autho rity - G4" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G4" - Adding: - # Certificate "Microsoft ECC Root Certificate Authority 2017" - # Certificate "Microsoft RSA Root Certificate Authority 2017" - # Certificate "e-Szigno Root CA 2017" - # Certificate "certSIGN Root CA G2" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "NAVER Global Root Certification Authority" - # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" - # Certificate "GlobalSign Secure Mail Root R45" - # Certificate "GlobalSign Secure Mail Root E45" - # Certificate "GlobalSign Root R46" - # Certificate "GlobalSign Root E46" - # Certificate "GLOBALTRUST 2020" - # Certificate "ANF Secure Server Root CA" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" t t ��*i�)+Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72a@��- Fix expired certificate. - Removing: - # Certificate "DST Root CA X3" �}�+i�+Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71b��- Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "GlobalSign Root CA - R2" - # Certificate "Cybertrust Global Root" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Adding: - # Certificate "TunTrust Root CA" - # Certificate "HARICA TLS RSA Root CA 2021" - # Certificate "HARICA TLS ECC Root CA 2021" - # Certificate "HARICA Client RSA Root CA 2021" - # Certificate "HARICA Client ECC Root CA 2021" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "vTrus ECC Root CA" - # Certificate "vTrus Root CA" - # Certificate "ISRG Root X2" - # Certificate "HiPKI Root CA - G1" - # Certificate "Telia Root CA v2" - # Certificate "D-TRUST BR Root CA 1 2020" - # Certificate "D-TRUST EV Root CA 1 2020" �t Root CA G2" - # Certificate "OpenTrust Root CA G3" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "Government Root Certification Authority" - # Certificate "A-Trust-Qual-02" - # Certificate "Thailand National Root Certification Authority - G1" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "SSC GDL CA Root B" - # Certificate "SAPO Class 2 Root CA" - # Certificate "SAPO Class 3 Root CA" - # Certificate "SAPO Class 4 Root CA" - # Certificate "CA Disig Root R1" - # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay" - # Certificate "ApplicationCA2 Root" - # Certificate "GlobalSign" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 3 Publi �c Primary Certification Authority - G4" - # Certificate "Halcom Root CA" - # Certificate "Swisscom Root EV CA 2" - # Certificate "CFCA GT CA" - # Certificate "Digidentity L3 Root CA - G2" - # Certificate "SITHS Root CA v1" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "Swisscom Root CA 2" - # Certificate "IGC/A AC racine Etat francais" - # Certificate "PersonalID Trustworthy RootCA 2011" - # Certificate "Swedish Government Root Authority v1" - # Certificate "Swiss Government Root CA II" - # Certificate "Swiss Government Root CA I" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "Microsoft Root Certificate Authority 2011" - # Certificate "CCA India 2011" - # Certificate "ANCERT C �ertificados Notariales V2" - # Certificate "ANCERT Certificados CGN V2" - # Certificate "EE Certification Centre Root CA" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "Verizon Global Root CA" - # Certificate "SwissSign Silver Root CA - G3" - # Certificate "SwissSign Platinum Root CA - G3" - # Certificate "SwissSign Gold Root CA - G3" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "SITHS CA v3" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ANF Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "KEYNECTIS ROOT CA" - # � Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "CCA India 2007" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "ECRaizEstado" - # Certificate "Configuration" - # Certificate "FNMT-RCM" - # Certificate "StartCom Certification Authority" - # Certificate "TWCA Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "thawte Primary Root CA - G2" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate �"thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "E-ME SSI (RCA)" - # Certificate "ACEDICOM Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Correo Uruguayo - Root CA" - # Certificate "CNNIC ROOT" - # Certificate "Common Policy" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "Cisco Root CA 2048" - # Certificate "CA Disig" - # Certificate "InfoNotary CSP Root" - # Certificate "UCA Global Root" - # Certificate "UCA Root" - # Certificate "DigiNotar Root CA" - # Certificate "Starfield Services Root Certificate Authority" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate �" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "Izenpe.com" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "state-institutions" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "SSC Root CA A" - # Certificate "SSC Root CA B" - # Certificate "SSC Root CA C" - # Certificate "Autoridad de Certificacion de la Abogacia" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "VAS La tvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "GLOBALTRUST" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "AC RAIZ DNIE" - # Certificate "Common Policy" - # Certificate "TÜRKTRUST Elektronik Sertifi ka Hizmet Sağlayıcısı" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-nQual-03" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 1" - # Certificate "KISA RootCA 3" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "A-Trust-Qual-02" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "Microsoft Root Certificate Authority 2010" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "UTN-USERFirst-Object" - # Certificate "BYTE Root Certification Authority 001" - # Certificate "CISRCA1" - # Certificate "ePKI Root Certification Authority - G2" - # Certificate "ePKI EV SSL Certification Authority - G1" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "SSL.com EV Root Certification Authority RSA" - # Certificate "LuxTrust Global Root 2" - # Certificate "ACA ROOT" - # Certificate "Security Communication ECC RootCA1" - # Certificate "Security Communication RootCA3" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "Network Solutions RSA Certificate Authority" - # Certificate "Network Solutions ECC Certificate Authority" - # Certificate "Australian Defence Public Root CA" - # Certificate "SI-TRUST Root" - # Certificate "Halcom Root Certificate Authority" - # Certificate "Application CA G3 Root" - # Certificate "GLOBALTRUST 2015" - # Certificate "Microsoft ECC Product Root Certificate Authority 2018" - # Certificate "emSign Root CA - G2" - # Certificate "emSign Root CA - C2" - # Certificate "Microsoft ECC TS Root Certificate Authority 2018" - # Certificate "DigiCert CS ECC P384 Root G5" - # Certificate "DigiCert CS RSA4096 Root G5" - # Certificate "DigiCert RSA4096 Root G5" - # Certificate "DigiCert ECC P384 Root G5" - # Certificate "HARICA Code Signing RSA Root CA 2021" - # Certificate "HARICA Code Signing ECC Root CA 2021" - # Certificate "Microsoft Identity Verification Root Certificate Authority 2020" o \�-iS+Bob Relyea <rrelyea@redhat.com> - 2022.2.54-73b�(�- Update to CKBI 2.54 from NSS 3.79�a�,i��Y+Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72b�V�- Update to CKBI 2.54 from NSS 3.79 - Adding: - # Certificate "CAEDICOM Root" - # Certificate "I.CA Root CA/RSA" - # Certificate "MULTICERT Root Certification Authority 01" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "Swedish Government Root Authority v3" - # Certificate "Swedish Government Root Authority v2" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrus � J J �2�.i�}+Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74b�z@- Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "TWCA Root Certification Authority" - # Certificate "Izenpe.com" - # Certificate "state-institutions" - # Certificate "GlobalSign" - # Certificate "Common Policy" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-Qual-02" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "AC Raíz Certicámara S.A." e �r+��V��: � � e D�8 � 71f20a3e8a0bfe010564d4b6ff77d4b2647ba8383e62e64a557c131359fff889D�7 � 78f9c4332b1d2f19135c616b66d43dfc85165cfc47974524516f8cfde4bb9665D�6 � bbe893457383d81228467a2e58df9d5f1d18cbfd30d4cd35b2c717dc660133b7D�5 � 744a4dba649fc88cac73b711d32a121916093d5d15e77ef286faaedeb4a66167D�4 � a0771a63bfd2ad4fc5390775761741924acb2e2a6d6fea5e21306d97e0c18190D�3 � 24f07a4fe7e067974796688aef2936d4d3134d870c6f53a7327a664da0d20893D�2 � dc1bf06608a791a1bc05682c7a5dd37ff4776553816b5359923260fb02f0c9e2D�1 � 71f02e63578770de15752f8dd63988ac82d645cc84914639679034beaf9f4136D�0 � cad56706d665a1639372b33e26f5e8b2d45d262ba181a414599688a30272bffdD�/ � 2b5152401ce98d5b3a93e430dbe5819aed3a19a15ef5104214f16d8171c990feD�. � aa50cc92809002bfd1b3255057b176376353bd9a36274c4d200209a0ec0861d3D�- � b1b4503ca199a88ac8a81a7fa75f6487ef746fd58e4bf8d079e879b4ad3596cbD�, � e3a24b7d3f533aea4ed0f3d9388b2f7d72febbb435d58e7be4020cdbc47107e6 9 � � 9 }�1i�,Bob Relyea <rrelyea@redhat.com> - 2021.2.50-71`��- Update to CKBI 2.50 from NSS 3.67 - version number update only�N�0i�5,Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71`�P@- Update to CKBI 2.48 from NSS 3.66 - Removing: - # Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - # Certificate "G �e�/i�c,Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79^�y�- Update to CKBI 2.41 from NSS 3.53.0 - Removing: - # Certificate "AddTrust Low-Value Services Root" - # Certificate "AddTrust External Root" - # Certificate "UTN USERFirst Email Root CA" - # Certificate "Certplus Class 2 Primary CA" - # Certificate "Deutsche Telekom Root CA 2" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "Swisscom Root CA 2" - # Certificate "Certinomis - Root CA" - Adding: - # Certificate "Entrust Root Certification Authority - G4" - fix permissions on ghosted files. eoTrust Global CA" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root CA" - # Certificate "Sonera Class 2 Root CA" - # Certificate "Taiwan GRCA" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "Trustis FPS Root CA" - # Certificate "EE Certification Centre Root CA" - # Certificate "LuxTrust Global Root 2" - # Certificate "Symantec Class 1 Public Primary Certification Autho rity - G4" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G4" - Adding: - # Certificate "Microsoft ECC Root Certificate Authority 2017" - # Certificate "Microsoft RSA Root Certificate Authority 2017" - # Certificate "e-Szigno Root CA 2017" - # Certificate "certSIGN Root CA G2" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "NAVER Global Root Certification Authority" - # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" - # Certificate "GlobalSign Secure Mail Root R45" - # Certificate "GlobalSign Secure Mail Root E45" - # Certificate "GlobalSign Root R46" - # Certificate "GlobalSign Root E46" - # Certificate "GLOBALTRUST 2020" - # Certificate "ANF Secure Server Root CA" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" t t ��2i�),Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72a@��- Fix expired certificate. - Removing: - # Certificate "DST Root CA X3" �}�3i�,Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71b��- Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "GlobalSign Root CA - R2" - # Certificate "Cybertrust Global Root" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Adding: - # Certificate "TunTrust Root CA" - # Certificate "HARICA TLS RSA Root CA 2021" - # Certificate "HARICA TLS ECC Root CA 2021" - # Certificate "HARICA Client RSA Root CA 2021" - # Certificate "HARICA Client ECC Root CA 2021" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "vTrus ECC Root CA" - # Certificate "vTrus Root CA" - # Certificate "ISRG Root X2" - # Certificate "HiPKI Root CA - G1" - # Certificate "Telia Root CA v2" - # Certificate "D-TRUST BR Root CA 1 2020" - # Certificate "D-TRUST EV Root CA 1 2020" t Root CA G2" - # Certificate "OpenTrust Root CA G3" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "Government Root Certification Authority" - # Certificate "A-Trust-Qual-02" - # Certificate "Thailand National Root Certification Authority - G1" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "SSC GDL CA Root B" - # Certificate "SAPO Class 2 Root CA" - # Certificate "SAPO Class 3 Root CA" - # Certificate "SAPO Class 4 Root CA" - # Certificate "CA Disig Root R1" - # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay" - # Certificate "ApplicationCA2 Root" - # Certificate "GlobalSign" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 3 Publi c Primary Certification Authority - G4" - # Certificate "Halcom Root CA" - # Certificate "Swisscom Root EV CA 2" - # Certificate "CFCA GT CA" - # Certificate "Digidentity L3 Root CA - G2" - # Certificate "SITHS Root CA v1" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "Swisscom Root CA 2" - # Certificate "IGC/A AC racine Etat francais" - # Certificate "PersonalID Trustworthy RootCA 2011" - # Certificate "Swedish Government Root Authority v1" - # Certificate "Swiss Government Root CA II" - # Certificate "Swiss Government Root CA I" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "Microsoft Root Certificate Authority 2011" - # Certificate "CCA India 2011" - # Certificate "ANCERT C ertificados Notariales V2" - # Certificate "ANCERT Certificados CGN V2" - # Certificate "EE Certification Centre Root CA" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "Verizon Global Root CA" - # Certificate "SwissSign Silver Root CA - G3" - # Certificate "SwissSign Platinum Root CA - G3" - # Certificate "SwissSign Gold Root CA - G3" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "SITHS CA v3" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ANF Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "CCA India 2007" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "ECRaizEstado" - # Certificate "Configuration" - # Certificate "FNMT-RCM" - # Certificate "StartCom Certification Authority" - # Certificate "TWCA Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "thawte Primary Root CA - G2" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "E-ME SSI (RCA)" - # Certificate "ACEDICOM Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Correo Uruguayo - Root CA" - # Certificate "CNNIC ROOT" - # Certificate "Common Policy" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "Cisco Root CA 2048" - # Certificate "CA Disig" - # Certificate "InfoNotary CSP Root" - # Certificate "UCA Global Root" - # Certificate "UCA Root" - # Certificate "DigiNotar Root CA" - # Certificate "Starfield Services Root Certificate Authority" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate " - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "Izenpe.com" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "state-institutions" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "SSC Root CA A" - # Certificate "SSC Root CA B" - # Certificate "SSC Root CA C" - # Certificate "Autoridad de Certificacion de la Abogacia" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "VAS La tvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "GLOBALTRUST" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "AC RAIZ DNIE" - # Certificate "Common Policy" - # Certificate "TÜRKTRUST Elektronik Sertifi ka Hizmet Sağlayıcısı" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-nQual-03" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 1" - # Certificate "KISA RootCA 3" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "A-Trust-Qual-02" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "Microsoft Root Certificate Authority 2010" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "UTN-USERFirst-Object" - # Certificate "BYTE Root Certification Authority 001" - # Certificate "CISRCA1" - # Certificate "ePKI Root Certification Authority - G2" - # Certificate "ePKI EV SSL Certification Authority - G1" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "SSL.com EV Root Certification Authority RSA" - # Certificate "LuxTrust Global Root 2" - # Certificate "ACA ROOT" - # Certificate "Security Communication ECC RootCA1" - # Certificate "Security Communication RootCA3" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "Network Solutions RSA Certificate Authority" - # Certificate "Network Solutions ECC Certificate Authority" - # Certificate "Australian Defence Public Root CA" - # Certificate "SI-TRUST Root" - # Certificate "Halcom Root Certificate Authority" - # Certificate "Application CA G3 Root" - # Certificate "GLOBALTRUST 2015" - # Certificate "Microsoft ECC Product Root Certificate Authority 2018" - # Certificate "emSign Root CA - G2" - # Certificate "emSign Root CA - C2" - # Certificate "Microsoft ECC TS Root Certificate Authority 2018" - # Certificate "DigiCert CS ECC P384 Root G5" - # Certificate "DigiCert CS RSA4096 Root G5" - # Certificate "DigiCert RSA4096 Root G5" - # Certificate "DigiCert ECC P384 Root G5" - # Certificate "HARICA Code Signing RSA Root CA 2021" - # Certificate "HARICA Code Signing ECC Root CA 2021" - # Certificate "Microsoft Identity Verification Root Certificate Authority 2020" o \�5iS,Bob Relyea <rrelyea@redhat.com> - 2022.2.54-73b�(�- Update to CKBI 2.54 from NSS 3.79�a�4i��Y,Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72b�V�- Update to CKBI 2.54 from NSS 3.79 - Adding: - # Certificate "CAEDICOM Root" - # Certificate "I.CA Root CA/RSA" - # Certificate "MULTICERT Root Certification Authority 01" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "Swedish Government Root Authority v3" - # Certificate "Swedish Government Root Authority v2" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrus J J �2�6i�},Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74b�z@- Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "TWCA Root Certification Authority" - # Certificate "Izenpe.com" - # Certificate "state-institutions" - # Certificate "GlobalSign" - # Certificate "Common Policy" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-Qual-02" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "AC Raíz Certicámara S.A." " - # Certificate "GPKIRootCA" - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 3" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "ePKI EV SSL Certification Authority - G1" - Adding: - # Certificate "DigiCert TLS ECC P384 Root G5" - # Certificate "DigiCert TLS RSA4096 Root G5" - # Certificate "DigiCert SMIME ECC P384 Root G5" - # Certificate "DigiCert SMIME RSA4096 Root G5" - # Certificate "Certainly Root R1" - # Certificate "Certainly Root E1" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA" - # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - # Certificate "Symantec Enterprise Mobile Root for Microsoft" - # Certificate "A-Trust-Root-05" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "ATHEX Root CA" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "America Online Root Certification Authority 1" - # Certificate "Juur-SK" - # Certificate "ComSign CA" - # Certificate "ComSign Secured CA" - # Certificate "ComSign Advanced Security CA" - # Certificate "Global Chambersign Root" - # Certificate "Sonera Class2 CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3" - # Certificate "VeriSign, Inc." - # Certificate "GTE CyberTrust Global Root" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "Swiss Government Root CA III" - # Certificate "Application CA G4 Root" - # Certificate "SSC GDL CA Root A" - # Certificate "GlobalSign Code Signing Root E45" - # Certificate "GlobalSign Code Signing Root R45" - # Certificate "Entrust Code Signing Root Certification Authority - CSBR1" � � � �7��,Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-71d��- Update to CKBI 2.60_v7.0.306 from NSS 3.91 - Removing: - # Certificate "Camerfirma Global Chambersign Root" - # Certificate "Staat der Nederlanden EV Root CA" - # Certificate "OpenTrust Root CA G1" - # Certificate "Swedish Government Root Authority v1" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "CCA India 2007" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "InfoNotary CSP Root" - # Certificate "DigiNotar Root CA" - # Certificate "Root CA � "�[�] � � P�>UO-Pablo Greco <pablo@fliagreco.com.ar>[��- Update to 7.6 - Fix vault reposp�=]�-Anssi Johansson <avij@centosproject.org>[� @- Point AltArch URLs to mirrorlist.c.o instead of mirror.c.o~�<U�)-Pablo Greco <pablo@fliagreco.com.ar>[l,�- Enable ostree-remount in presets - Include power9 as a separate ppc64le archz�;U�!-Pablo Greco <pablo@fliagreco.com.ar>[dC�- Unified tarball for all arches, so it can be built from the same src.rpmz�:U�!-Pablo Greco <pablo@fliagreco.com.ar>[b�A- Sync version and fixes with centos-release - Unified spec for all archesG�9OC-Johnny Hughes <johnny@centos.org>[b�@- Post Trans for contentdir�Z�8��3,Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-72d�i�- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused. o ��4 � o G�DOC.Johnny Hughes <johnny@centos.org>[b�@- Post Trans for contentdirx�CU� .Pablo Greco <pablo@fliagreco.com.ar>Z�K@- armhfp: Require extlinux-bootloader now that update-boot was obsoletedP�BYK-Pablo Greco <pgreco@centosproject.org>_��@- Fix reference to 7.8 upstream@�AY+-Pablo Greco <pgreco@centosproject.org>_��@- Update to 7.9�>�@Y�%-Pablo Greco <pgreco@centosproject.org>^��- Add rootfs-expand to aarch64 - Create generic kvariant in aarch64 if it doesn't exist (for new kernel repos) - Own kvariant var in armhfp and aarch64 - Backport move of /etc/os-release to /usr/lib/os-release (ngompa) - Spec file cleanup (carlwgeorge) - Update to 7.8�p�?Y� -Pablo Greco <pgreco@centosproject.org>]m@- Own yum vars - Generate yum vars at build time - Remove dist_suffix - Fix autorelabel preset - Fix tuned profile in system-release-cpe - Set aarch64 tuned profile to server - Update to 7.7 � ��� � �p�JY� .Pablo Greco <pgreco@centosproject.org>]m@- Own yum vars - Generate yum vars at build time - Remove dist_suffix - Fix autorelabel preset - Fix tuned profile in system-release-cpe - Set aarch64 tuned profile to server - Update to 7.7P�IUO.Pablo Greco <pablo@fliagreco.com.ar>[��- Update to 7.6 - Fix vault reposp�H]�.Anssi Johansson <avij@centosproject.org>[� @- Point AltArch URLs to mirrorlist.c.o instead of mirror.c.o~�GU�).Pablo Greco <pablo@fliagreco.com.ar>[l,�- Enable ostree-remount in presets - Include power9 as a separate ppc64le archz�FU�!.Pablo Greco <pablo@fliagreco.com.ar>[dC�- Unified tarball for all arches, so it can be built from the same src.rpmz�EU�!.Pablo Greco <pablo@fliagreco.com.ar>[b�A- Sync version and fixes with centos-release - Unified spec for all arches � �\�l � �$�Ok�_/Rob Crittenden <rcritten@redhat.com> - 0.78.4-8[M�A- Disable iterate-10 test which fails intermitently (#1596161) - Add BuildRequires for running autoreconf� �Nk�1/Rob Crittenden <rcritten@redhat.com> - 0.78.4-7[M�@- Pass _PROXY, _proxy, LANG and LC_* environment variables to helpers (#1596161)\�MkQ/Rob Crittenden <rcritten@redhat.com> - 0.78.4-6[ @�- Remove reference to unused patch_�LOs.Johnny Hughes <johnny@centos.org>dcp@- Update for 7.9.2009 and EOL - EOL is 30 June 2024�>�KY�%.Pablo Greco <pgreco@centosproject.org>^��- Add rootfs-expand to aarch64 - Create generic kvariant in aarch64 if it doesn't exist (for new kernel repos) - Own kvariant var in armhfp and aarch64 - Backport move of /etc/os-release to /usr/lib/os-release (ngompa) - Spec file cleanup (carlwgeorge) - Update to 7.8 >� � {�Tm� /Rob Crittenden <rcritten@redhat.com> - 0.78.4-13^�@- Ensure that files read in have a trailing new-line (#1814976)�x�Sm�/Rob Crittenden <rcritten@redhat.com> - 0.78.4-12]A��- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit man page (#1651368) - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781) - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727) - Document owner and permission parameters to getcert (#1549585)��Rm�9/Rob Crittenden <rcritten@redhat.com> - 0.78.4-11\b�@- Increase SCEP spec compliance, set more secure default cipher and hash. (#1533216)��Qm�C/Rob Crittenden <rcritten@redhat.com> - 0.78.4-10[�@- Backport patches to add support for the MS Certificate Template V2 extension (#1622184)�>�Pk�/Rob Crittenden <rcritten@redhat.com> - 0.78.4-9[qr�- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment variables to helpers. The root cause was a bug in IPA (#1596161) W x�\� � W ��Zm�C0Rob Crittenden <rcritten@redhat.com> - 0.78.4-10[�@- Backport patches to add support for the MS Certificate Template V2 extension (#1622184)�>�Yk�0Rob Crittenden <rcritten@redhat.com> - 0.78.4-9[qr�- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment variables to helpers. The root cause was a bug in IPA (#1596161)�$�Xk�_0Rob Crittenden <rcritten@redhat.com> - 0.78.4-8[M�A- Disable iterate-10 test which fails intermitently (#1596161) - Add BuildRequires for running autoreconf� �Wk�10Rob Crittenden <rcritten@redhat.com> - 0.78.4-7[M�@- Pass _PROXY, _proxy, LANG and LC_* environment variables to helpers (#1596161)��Vm�#/Rob Crittenden <rcritten@redhat.com> - 0.78.4-15`��@- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)��Um� /Rob Crittenden <rcritten@redhat.com> - 0.78.4-14^Ǿ�- Include &message=CA-IDENT with GetCACaps/GetCACert requests (#1839181) ] j�p � ] ��_m�#0Rob Crittenden <rcritten@redhat.com> - 0.78.4-15`��@- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)��^m� 0Rob Crittenden <rcritten@redhat.com> - 0.78.4-14^Ǿ�- Include &message=CA-IDENT with GetCACaps/GetCACert requests (#1839181){�]m� 0Rob Crittenden <rcritten@redhat.com> - 0.78.4-13^�@- Ensure that files read in have a trailing new-line (#1814976)�x�\m�0Rob Crittenden <rcritten@redhat.com> - 0.78.4-12]A��- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit man page (#1651368) - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781) - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727) - Document owner and permission parameters to getcert (#1549585)��[m�90Rob Crittenden <rcritten@redhat.com> - 0.78.4-11\b�@- Increase SCEP spec compliance, set more secure default cipher and hash. (#1533216) � ��} � ��dm�91Rob Crittenden <rcritten@redhat.com> - 0.78.4-11\b�@- Increase SCEP spec compliance, set more secure default cipher and hash. (#1533216)��cm�C1Rob Crittenden <rcritten@redhat.com> - 0.78.4-10[�@- Backport patches to add support for the MS Certificate Template V2 extension (#1622184)�>�bk�1Rob Crittenden <rcritten@redhat.com> - 0.78.4-9[qr�- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment variables to helpers. The root cause was a bug in IPA (#1596161)�$�ak�_1Rob Crittenden <rcritten@redhat.com> - 0.78.4-8[M�@- Disable iterate-10 test which fails intermitently (#1596161) - Add BuildRequires for running autoreconf{�`m� 0Rob Crittenden <rcritten@redhat.com> - 0.78.4-16aHw�- Fix file descriptor leak when executing CA helpers (#1992439) u �~ � u {�im� 1Rob Crittenden <rcritten@redhat.com> - 0.78.4-16aHw�- Fix file descriptor leak when executing CA helpers (#1992439)��hm�#1Rob Crittenden <rcritten@redhat.com> - 0.78.4-15`��@- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)��gm� 1Rob Crittenden <rcritten@redhat.com> - 0.78.4-14^Ǿ�- Include &message=CA-IDENT with GetCACaps/GetCACert requests (#1839181){�fm� 1Rob Crittenden <rcritten@redhat.com> - 0.78.4-13^�@- Ensure that files read in have a trailing new-line (#1814976)�x�em�1Rob Crittenden <rcritten@redhat.com> - 0.78.4-12]A��- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit man page (#1651368) - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781) - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727) - Document owner and permission parameters to getcert (#1549585) X XWh � X �z�nu�2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7^s^�- ci-Removing-cloud-user-from-wheel.pat %� �mu�G2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el7^p��- Rebase to 19.4 [bz#1803094] - Resolves: bz#1803094 ([RHEL-7.9] cloud-init rebase to 19.4)�k�lu�c2Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7]��@- ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526] - Resolves: bz#1744526 ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)�}�ku�2Miroslav Rezanina <mrezanin@redhat.com> - 18.5-5.el7]w�@- ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010] - Resolves: bz#1593010 ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])�$�jm�]1Rob Crittenden <rcritten@redhat.com> - 0.78.4-17an�@- certmonger creates CSRs with invalid DER syntax for X509v3 extensions with critical=FALSE (#2015511) ch [bz#1549638] - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015] - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170] - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173] - ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338] - Resolves: bz#1549638 ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase) - Resolves: bz#1574338 (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7]) - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1812170 (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7]) - Resolves: bz#1812173 (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7]) + �� + �@�qu� 2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^��@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015] - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��pu�2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^��@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��ou�2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^��@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) q Yq �d�su�U2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^��- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999] - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)�#�ru�S2Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^�>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015] - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log) � �W � �z�vu�3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7^s^�- ci-Removing-cloud-user-from-wheel.pat )� �uu�G3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el7^p��- Rebase to 19.4 [bz#1803094] - Resolves: bz#1803094 ([RHEL-7.9] cloud-init rebase to 19.4)��ti�!2Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_��- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619] - ci-Changing-notation-of-subp-call.patch [bz#1839619] - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916] - Resolves: bz#1839619 ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z]) - Resolves: bz#1871916 ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z]) ch [bz#1549638] - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015] - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170] - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173] - ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338] - Resolves: bz#1549638 ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase) - Resolves: bz#1574338 (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7]) - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1812170 (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7]) - Resolves: bz#1812173 (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7]) + �� + �@�yu� 3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^��@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015] - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��xu�3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^��@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��wu�3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^��@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) q Yq �d�{u�U3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^��- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999] - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)�#�zu�S3Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^�>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015] - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log) � � � �#�}i�_3Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])��|i�!3Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_��- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619] - ci-Changing-notation-of-subp-call.patch [bz#1839619] - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916] - Resolves: bz#1839619 ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z]) - Resolves: bz#1871916 ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z]) Y �ja Y ��u�4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^��@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)�� u�4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^��@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)�z�u�4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7^s^�- ci-Removing-cloud-user-from-wheel.pat .�#�~i�_3Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z]) ch [bz#1549638] - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015] - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170] - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173] - ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338] - Resolves: bz#1549638 ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase) - Resolves: bz#1574338 (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7]) - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1812170 (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7]) - Resolves: bz#1812173 (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7]) � < � �#�u�S4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^�>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015] - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)�@�u� 4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^��@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015] - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) ��i�!4Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_��- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619] - ci-Changing-notation-of-subp-call.patch [bz#1839619] - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916] - Resolves: bz#1839619 ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z]) - Resolves: bz#1871916 ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])�d�u�U4Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^��- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999] - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log) � �� � �F�i�%4Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4`+��- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807] - Resolves: bz#1900807 (Update existing user password RHEL7x)�#�i�_4Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])�#�i�_4Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z]) + �� + �@� u� 5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^��@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015] - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)�� u�5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^��@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)�� u�5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^��@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) q Yq �d� u�U5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^��- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999] - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)�#� u�S5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^�>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015] - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log) � � � �#�i�_5Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])��i�!5Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_��- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619] - ci-Changing-notation-of-subp-call.patch [bz#1839619] - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916] - Resolves: bz#1839619 ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z]) - Resolves: bz#1871916 ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z]) � ��u�6Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^��@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)�n�}�a5Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7_9.5`� @- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616] - Resolves: bz#1897616 ([rhel-7]cloud-final.service fails if NetworkManager not installed.)�F�i�%5Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4`+��- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807] - Resolves: bz#1900807 (Update existing user password RHEL7x)�#�i�_5Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z]) � < � �#�u�S6Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^�>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015] - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)�@�u� 6Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^��@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015] - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) ��i�!6Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_��- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619] - ci-Changing-notation-of-subp-call.patch [bz#1839619] - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916] - Resolves: bz#1839619 ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z]) - Resolves: bz#1871916 ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])�d�u�U6Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^��- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999] - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log) � �� � �F�i�%6Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4`+��- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807] - Resolves: bz#1900807 (Update existing user password RHEL7x)�#�i�_6Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])�#�i�_6Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z]) { � { � � s�I7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r� su7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m� �Y7Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.� � i�+6Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.6a�- ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231] - Resolves: bz#2003231 (anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)�n�}�a6Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7_9.5`� @- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616] - Resolves: bz#1897616 ([rhel-7]cloud-final.service fails if NetworkManager not installed.) � s�t�[ � �Q�%�� 7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��$�� 7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �#s�#7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�"sW7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��!s�97Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� � s�!7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1. B r�\�6 � B � �,s�#8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�+sW8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��*s�98Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �)s�!8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �(s�I8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�'su8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.� �&��7Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected. m u�� � m � �2s�!9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �1s�I9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t�0�g8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �/��8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�.�� 8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��-�� 8Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize. e �r+��V��: � � e D�E � 298ea0c2efac5573e322e25503e2c30d52bb589fa8ef1cc0df2ba4f2bbbfd3c3D�D � c5fc7f37feaeaf11068007f084d0a7046d1674006226de685b890730ee95e3c5D�C � 5f7f4b24a0e71345d5407d27b3ec2dba93f549f3873d99c73c1a6b6d5527120bD�B � 69d4fb9319ca5a9e4cae9e47996216cc1f227003389290e9e68c05911af73d15D�A � f3f69f58e04b244b740beae57319f782363f8a8bfaacea37bca6ed2cb7d1cd2eD�@ � 1cb1df73a2743fe17a9ccf9a82ba1339ff309d7912d173c10e2a3e8ef400fcffD�? � 2009ebe5d0c47032c5784190a92c5dfb2abdff45270eabce812d7641915b2fb6D�> � 88829e504b63e6f7b3b0f74d257ab87d6d2ac4c04e4220a90e33576fdc11d02fD�= � 6a71d3f89673ae6444441f6f1e25eb47a4347ba95f13345e2fcfcdfda313670bD�< � 8c4048ad0a30efd78b835e73ee590a52730bf658e4ee011dd963e908a4dbad81D�; � 6489c51c51e8202231b1a3e24f6328463bbd952da0cbdede7cfd828112422e18D�: � c7607cfa2a4a5dcba948ec0c8b744a7f05d5113920dcbe14a16acdc6a14166b7D�9 � 7fe1420aaf46d2b3e38efd53645a2803c75ef85aa2e51400cf062745f1a1e9ca � gs� � � �8��9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�7�� 9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��6�� 9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �5s�#9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�4sW9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��3s�99Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. W ��F�u � W � �?e�7:Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880� �>m�':Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109m�=qm:Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�<e[:Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179y�;m�:Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256�C�:��9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�9�g9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters. > ��y � � > m�Gqm;Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�Fe[;Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179y�Em�;Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256r�Dyo:Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.1-8.1b�@- Remove timezone boundaries Resolves: #2098262v�Ca� :Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431z�Bm� :Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��Am�;:Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643p�@mw:Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289 m s�o�[ � m r�Nyo;Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.1-8.1b�@- Remove timezone boundaries Resolves: #2098262v�Ma� ;Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431z�Lm� ;Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��Km�;;Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643p�Jmw;Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289� �Ie�7;Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880� �Hm�';Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109 Y 7�Z�] � Y p�Umw<Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289� �Te�7<Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880� �Sm�'<Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109m�Rqm<Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�Qe[<Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179y�Pm�<Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256�E�Oi�#<Bastien Nocera <bnocera@redhat.com> - 3.26.2-8Z� �+ control-center-3.26.2-8 - Fix Wi-Fi networks not getting updated - Show "Wi-Fi disabled" page when Wi-Fi is disabled - Resolves: #1545713 ] i�s�. � ] m�\qm=Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�[e[=Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179y�Zm�=Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256�E�Yi�#=Bastien Nocera <bnocera@redhat.com> - 3.26.2-8Z� �+ control-center-3.26.2-8 - Fix Wi-Fi networks not getting updated - Show "Wi-Fi disabled" page when Wi-Fi is disabled - Resolves: #1545713v�Xa� <Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431z�Wm� <Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��Vm�;<Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643 f s�o�[ � f y�cm�>Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256v�ba� =Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431z�am� =Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��`m�;=Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643p�_mw=Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289� �^e�7=Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880� �]m�'=Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109 � �/�� � z�jm� >Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��im�;>Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643p�hmw>Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289� �ge�7>Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880� �fm�'>Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109m�eqm>Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�de[>Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179 o �I�l � o � �qm�'?Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109m�pqm?Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�oe[?Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179y�nm�?Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256�E�mi�#?Bastien Nocera <bnocera@redhat.com> - 3.26.2-8Z� �+ control-center-3.26.2-8 - Fix Wi-Fi networks not getting updated - Show "Wi-Fi disabled" page when Wi-Fi is disabled - Resolves: #1545713r�lyo>Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.1-8.1b�@- Remove timezone boundaries Resolves: #2098262v�ka� >Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431 L o�e�o � L x�xY�@Jiri Vanek <jvanek@redhat.com> - 1.2-1W��- updated to 1,3 which fixing nss minor issue - Resolves: rhbz#1296430�$�wY�q@Jiri Vanek <jvanek@redhat.com> - 1.1-5W��- posttrans silenced, the error is appearing only in state, when there is nothing to copy - Resolves: rhbz#1296430v�va� ?Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431z�um� ?Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��tm�;?Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643p�smw?Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289� �re�7?Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880 U qJ�n � U ��~Y�/@Jiri Vanek <jvanek@redhat.com> - 3.3-3Z�m�- fixes issue when java.security for openjdk7 was erased - Resolves: rhbz#1571854��}Y�E@Jiri Vanek <jvanek@redhat.com> - 3.3-2Y�ZA- added another subdirs for policies files - Resolves: rhbz#1503647 - Resolves: rhbz#1503668t�|Y�@Jiri Vanek <jvanek@redhat.com> - 3.3-1Y�Z@- updated to 3.3 - Resolves: rhbz#1503647 - Resolves: rhbz#1503668b�{Yo@Jiri Vanek <jvanek@redhat.com> - 2.2-3YG��- updated to latest head - Resolves: rhbz#1427463�#�zY�o@Jiri Vanek <jvanek@redhat.com> - 2.2-1Y?�- added "jre/lib/security/blacklisted.certs" to cared files - moved to newest release 2.1 - moved to new upstream at pagure.io - added new script of copy_jdk_configs_fixFiles.sh - copy_jdk_configs.lua aligned to it - Resolves: rhbz#1427463� �yY�?@Jiri Vanek <jvanek@redhat.com> - 1.3-1X@�- updated to upstream 1.3 (adding jre/lib/security/cacerts file) - Resolves: rhbz#1399719 1 � � 1 �g�a�oAOndrej Vasik <ovasik@redhat.com> - 8.22-18Wv[@- fix xfs build failure in chrooted environment (#1263341) - update filesystem lists for stat and tail from latest upstream (#1327881, #1280357) - disable id/setgid.sh test(missing chroot feature), fix cp-a-selinux test (#1266500,#1266501) - colorls.sh - change detection of interactive shell for ksh compatibility (#1321648) - fix date --date crash with empty or invalid TZ envvar (#1325786) - df -l: do not hang on a dead autofs mount point (#1309247) - sort -h: fix functionality of human readable numeric sort for other than first field (#1328360)n�aAOndrej Vasik <ovasik@redhat.com> - 8.22-16VU��- cp: prevent potential sparse file corruption (#1284906)~� [�#@Jiri Vanek <jvanek@redhat.com> - 3.3-11[�R@- Fixing deletation ofemtpy dirs via rogue symlink - Resolves: rhbz#2100617o�[�@Jiri Vanek <jvanek@redhat.com> - 3.3-10Z�@- added javaws.policy and blacklist - Resolves: rhbz#1571854 � �� � �>�_� AKamil Dudka <kdudka@redhat.com> - 8.22-23[#�@- update description of the -a/--all option in df.1 man page (#1553212) - sort -M: fix memory leak when using multibyte locale (#1540059)h�_uAKamil Dudka <kdudka@redhat.com> - 8.22-22Zhu@- mv -n: do not overwrite the destination (#1526265)r�_�AKamil Dudka <kdudka@redhat.com> - 8.22-21Z%8�- timeout: revert the last fix for a possible race (#1439465)��_�%AKamil Dudka <kdudka@redhat.com> - 8.22-20Z�@- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)�p�_�AKamil Dudka <kdudka@redhat.com> - 8.22-19Yé�- timeout: fix race possibly terminating wrong process (#1439465) - ls: allow interruption when reading slow directories (#1421802) - fold: preserve new-lines in mutlibyte text (#1418505) � �!� d� o]AKamil Dudka <kdudka@redhat.com> - 8.22-24.el7_9.2_�- sync: fix open fallback bug (#1850682)r� oyAKamil Dudka <kdudka@redhat.com> - 8.22-24.el7_9.1^��- sync: support syncing specified arguments (#1850682)�f�_�oAKamil Dudka <kdudka@redhat.com> - 8.22-24\���- doc: improve description of the --kibibytes option of ls (#1527391) - doc: fix typo in date example (#1620624) - stat,tail: sync the list of file systems with coreutils-8.31 (#1659530) - df: avoid stat() for dummy file systems with -l (#1668137) - df: prioritize mounts nearer the device root (#1042840) S \ � S �� _�YBJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g� _sBJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� � _�cBJan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�cuBJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�c�}BJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�_�OBJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�_�wBJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��_�SBJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) a #D�; a �V�_�OCJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��_�YCJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�_sCJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage�[�c�UBJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�_�UBJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� �O �T �Z !�_ "�d #�i $�n &�q '�s (�v *�y +�{ ,�} -� /� 0� 1� 2� 3� 4� 5� 6� 7� 8� 9� :�% ;�, <�2 >�8 ?�? @�G A�N B�U C�\ D�c E�j F�q G�x H�~ I� J� K� L� M� N� O� Q� R� S�! T�$ U�& V�+ W�. X�2 Z�5 [�8 \�: ]�? ^�B _�F `�I a�L b�N c�P d�S e�V f�X g�] h�` i�d j�i k�k l�n m�q n�t o�v p�x q�{ r�~ s� t� u� v� w� x� y� z� {�# |�) }�/ ~�5 ��: ��? ��E ��J ��P ��U ��[ ��a ��f ��k ��q ��u ��y ��~ �� �� �� �� �� �� � M� � ��_�SCJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j�cuCJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�c�}CJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition > �� � > �� c�GCJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[� c�UCJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y� _�UCJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)�j�_�wCJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885) S \ � S ��!_�YDJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g� _sDJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� � _�cDJan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�$cuDJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�#c�}DJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�"_�ODJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�&_�wDJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��%_�SDJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) a #D�; a �V�+_�OEJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��*_�YEJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�)_sEJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage�[�(c�UDJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�'_�UDJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) � M� � ��._�SEJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j�-cuEJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�,c�}EJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition > �� � > ��2c�GEJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�1c�UEJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�0_�UEJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)�j�/_�wEJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885) e �r+��V��: � � e D�R � f19ef75ad99fd28a32063032985acd16eed69a49de7940fe80fe25a45d7b20d5D�Q � 9b1fd6f75c44990182608f11437d29610a09c14eef6cd15e358d8dc204c067a6D�P � 21cd1d5d48d73a90f3072f23c5e4e21283dbd047dba314b528013a884054068eD�O � 8a874d1a0c3f0dce30ef48f0095dafcb59e864b2b89528a61ee1b1d0a5dcfb7fD�N � 68ee3d48388315e955a81bc549710f8201b486ea8413b2e63a516ea8d40e5534D�M � d413e9756d3b6aece12ea946151d51900d80c7fc73dbaac617ca6d4212d49e38D�L � 26c0bf18af70ee3cb9525c40bdea17bad250aa0b3b0200dd8132b995dc4081a9D�K � 547e7d5fe595fcb6ed9634585475a0cdf56327add42e4ccd74358d8c4a27b140D�J � e5654c00b989b0595c553eaf073114c219aec1d06fb9571ebdcebbdfef5a90d5D�I � 99812ac04e29b031870c5675a4888ceb7ec75a205bace3fe8e9339e91f0e8109D�H � adf023be78972d5813085a5facdbea98c19687e2f35459fa6060b6c2fded31a9D�G � c6c5c2f11ff4c5bdd22deb3a88852ae012482664acb196d328e4b290495979edD�F � 2bf6c6071be41d65c91d31c9399563bd6d9298e9a9911c2cfff1bae35d4209fe S \ � S ��5_�YFJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�4_sFJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �3_�cFJan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�8cuFJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�7c�}FJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�6_�OFJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�:_�wFJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��9_�SFJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) a #D�; a �V�?_�OGJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��>_�YGJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�=_sGJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage�[�<c�UFJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�;_�UFJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) � M� � ��B_�SGJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j�AcuGJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�@c�}GJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition > �� � > ��Fc�GGJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�Ec�UGJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�D_�UGJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)�j�C_�wGJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885) S \ � S ��I_�YHJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�H_sHJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �G_�cHJan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�LcuHJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�Kc�}HJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�J_�OHJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�N_�wHJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��M_�SHJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) D #D �[�Pc�UHJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�O_�UHJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) S \ � S ��S_�YIJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�R_sIJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �Q_�cIJan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�VcuIJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�Uc�}IJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�T_�OIJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�X_�wIJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��W_�SIJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) a #D�; a �V�]_�OJJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��\_�YJJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�[_sJJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage�[�Zc�UIJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�Y_�UIJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) � M� � ��`_�SJJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j�_cuJJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�^c�}JJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition > �� � > ��dc�GJJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�cc�UJJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�b_�UJJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)�j�a_�wJJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885) � �� j � j�icuKJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�hc�}KJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�g_�OKJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��f_�YKJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�e_sKJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage v � v �j�k_�wKJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��j_�SKJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) � #D� ��nc�GKJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�mc�UKJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�l_�UKJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) S \ � S ��q_�YLJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�p_sLJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �o_�cLJan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�tcuLJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�sc�}LJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�r_�OLJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�v_�wLJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��u_�SLJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) D #D �[�xc�ULJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�w_�ULJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) S \ � S ��{_�YMJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�z_sMJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �y_�cMJan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�~cuMJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�}c�}MJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�|_�OMJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j� _�wMJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��_�SMJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) a #D�; a �V�_�ONJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��_�YNJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�_sNJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage�[�c�UMJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�_�UMJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) � M� � ��_�SNJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j�cuNJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�c�}NJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition > �� � > �� c�GNJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[� c�UNJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y� _�UNJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)�j� _�wNJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885) � �� j � j�cuOJan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�c�}OJan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�_�OOJan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��_�YOJan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g� _sOJan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage v � v �j�_�wOJan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��_�SOJan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) � #D�& � k�gsPDave Anderson <anderson@redhat.com> - 7.2.3-4[5A- Fix bpf.c covscan issues Resolves: rhbz#1559758��g� PDave Anderson <anderson@redhat.com> - 7.2.3-3[5@- Rebase to github commits a6cd8408 to da49e201 Resolves: rhbz#1559460��c�GOJan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�c�UOJan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�_�UOJan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) � 9��D � �:� g�PDave Anderson <anderson@redhat.com> - 7.2.3-9\,��- Alternate list loop detection option Resolves: rhbz#1595389 - Readline library tab completion plugin Resolves: rhbz#1656165�&� g�gPDave Anderson <anderson@redhat.com> - 7.2.3-8[��@- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. Resolves: rhbz#1617936�1�g�}PDave Anderson <anderson@redhat.com> - 7.2.3-7[�Q@- Support ppc64 increased VA range - Fix ppc64 "bt" command failure reporting invalid NIP value Resolves: rhbz#1617936��g�?PDave Anderson <anderson@redhat.com> - 7.2.3-6[?Y�- Fix for RHEL7 kernel's eBPF support that uses old IDR facility Resolves: rhbz#1559758�C�g�!PDave Anderson <anderson@redhat.com> - 7.2.3-5[ d@- Rebase to github commits b9d76838 to c79a11fa Resolves: rhbz#1559460 - Fix ppc64/ppc6le stacksize calculation Resolves: rhbz#1589685 | ��7�C | �C�#g�!QDave Anderson <anderson@redhat.com> - 7.2.3-5[ d@- Rebase to github commits b9d76838 to c79a11fa Resolves: rhbz#1559460 - Fix ppc64/ppc6le stacksize calculation Resolves: rhbz#1589685k�"gsQDave Anderson <anderson@redhat.com> - 7.2.3-4[5A- Fix bpf.c covscan issues Resolves: rhbz#1559758��!g� QDave Anderson <anderson@redhat.com> - 7.2.3-3[5@- Rebase to github commits a6cd8408 to da49e201 Resolves: rhbz#1559460�8� o�PBhupesh Sharma <bhsharma@redhat.com> - 7.2.3-11.1_k8�- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction Resolves: rhbz#1854016�� i�5PDave Anderson <anderson@redhat.com> - 7.2.3-11\���- Fix to prevent display of invalid "timer" command entries Resolves: rhbz#1818084x� i� PDave Anderson <anderson@redhat.com> - 7.2.3-10\4��- Restrict command line to 1500 bytes Resolves: rhbz#1663792 @ j� M � @ ��)i�5QDave Anderson <anderson@redhat.com> - 7.2.3-11\���- Fix to prevent display of invalid "timer" command entries Resolves: rhbz#1818084x�(i� QDave Anderson <anderson@redhat.com> - 7.2.3-10\4��- Restrict command line to 1500 bytes Resolves: rhbz#1663792�:�'g�QDave Anderson <anderson@redhat.com> - 7.2.3-9\,��- Alternate list loop detection option Resolves: rhbz#1595389 - Readline library tab completion plugin Resolves: rhbz#1656165�&�&g�gQDave Anderson <anderson@redhat.com> - 7.2.3-8[��@- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. Resolves: rhbz#1617936�1�%g�}QDave Anderson <anderson@redhat.com> - 7.2.3-7[�Q@- Support ppc64 increased VA range - Fix ppc64 "bt" command failure reporting invalid NIP value Resolves: rhbz#1617936��$g�?QDave Anderson <anderson@redhat.com> - 7.2.3-6[?Y�- Fix for RHEL7 kernel's eBPF support that uses old IDR facility Resolves: rhbz#1559758 > D�P� � > �1�/g�}RDave Anderson <anderson@redhat.com> - 7.2.3-7[�Q@- Support ppc64 increased VA range - Fix ppc64 "bt" command failure reporting invalid NIP value Resolves: rhbz#1617936��.g�?RDave Anderson <anderson@redhat.com> - 7.2.3-6[?Y�- Fix for RHEL7 kernel's eBPF support that uses old IDR facility Resolves: rhbz#1559758�C�-g�!RDave Anderson <anderson@redhat.com> - 7.2.3-5[ d@- Rebase to github commits b9d76838 to c79a11fa Resolves: rhbz#1559460 - Fix ppc64/ppc6le stacksize calculation Resolves: rhbz#1589685k�,gsRDave Anderson <anderson@redhat.com> - 7.2.3-4[5A- Fix bpf.c covscan issues Resolves: rhbz#1559758��+g� RDave Anderson <anderson@redhat.com> - 7.2.3-3[5@- Rebase to github commits a6cd8408 to da49e201 Resolves: rhbz#1559460�8�*o�QBhupesh Sharma <bhsharma@redhat.com> - 7.2.3-11.1_k8�- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction Resolves: rhbz#1854016 Y V� � � Y s�5e�STomáš Mráz <tmraz@redhat.com> - 1.4.11-15V�I�- crontab: use temporary filename properly ignored by crond�8�4o�RBhupesh Sharma <bhsharma@redhat.com> - 7.2.3-11.1_k8�- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction Resolves: rhbz#1854016��3i�5RDave Anderson <anderson@redhat.com> - 7.2.3-11\���- Fix to prevent display of invalid "timer" command entries Resolves: rhbz#1818084x�2i� RDave Anderson <anderson@redhat.com> - 7.2.3-10\4��- Restrict command line to 1500 bytes Resolves: rhbz#1663792�:�1g�RDave Anderson <anderson@redhat.com> - 7.2.3-9\,��- Alternate list loop detection option Resolves: rhbz#1595389 - Readline library tab completion plugin Resolves: rhbz#1656165�&�0g�gRDave Anderson <anderson@redhat.com> - 7.2.3-8[��@- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. Resolves: rhbz#1617936 e �r+��V��: � � e D�_ � 964701bf20ea9285610ce775b493e6d79bf2f27999d29ccbdc6ac91eb4261ce9D�^ � 801be54b282724d9d09516d698bc641c19471a40f11821cbf51804f40228e59aD�] � 902507007b4e5ee04bd47f98345b605b7cce177b0569460eb0efb299a91918e5D�\ � e4bb7031f520b296dbe56b80bca148b9f8409329cef2007dd5a06e4548e780d3D�[ � 9e8882a42b481017ad43c670ac8c75a3a878d804f43f7716f685798813397a3fD�Z � 44ab9339bd5d854867709f046ee7265cdf470dcab6e44935238e9d85f50a3ffbD�Y � 891dab92096ecafec7121bace38c5d802443f838cef21422beb6a451c0e0892dD�X � 8c0e209a9b3e465d9d43e1e9e5585d8222d61a73748d1a2e8ce486e8b2b25715D�W � d97cce4820b6ef5656963548218f0d4ff9ef7c504f16623dd12d6b73c7cf2e2fD�V � 93e5893e2543f24cc6076a35548745fc96be00bd8f9960f8645d41100dcf0c3aD�U � 87818b04247bfad1a3a5ad6b7d4ba90f571e7df0d267da4a66fd5e1e17409c65D�T � 596130fb4480b497134f1ceee905500a7718c15559963c2786a784a511011077D�S � 64c5a32d35ccc6312c43d89cfee42872bacebecc43ec10e09f90916daedb80da s �D�* s �3�:a�SMarcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691i�9eqSTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726)�*�8e�qSTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �7e�[STomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed)��6e�GSTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current context t ��r� t ��?e�GTTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current context�a�>e�_SJan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n�=aSMarcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730��<a�WSMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{�;a�SMarcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111 o ]�C� o ��Ea�WTMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{�Da�TMarcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111�3�Ca�TMarcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691i�BeqTTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726)�*�Ae�qTTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �@e�[TTomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed) { �� � { ��Je�GUTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current contexts�Ie�UTomáš Mráz <tmraz@redhat.com> - 1.4.11-15V�I�- crontab: use temporary filename properly ignored by crond� �Hy�ATOndřej Pohořelský <opohorel@redhat.com> - 1.4.11-25d@- Set 'missingok' for /etc/cron.deny to not recreate it on update - Resolves: rhbz#2059479�a�Ge�_TJan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n�FaTMarcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730 o ]�C� o ��Pa�WUMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{�Oa�UMarcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111�3�Na�UMarcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691i�MeqUTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726)�*�Le�qUTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �Ke�[UTomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed) @ ��� � @ �*�Ue�qVTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �Te�[VTomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed)��Se�GVTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current context�a�Re�_UJan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n�QaUMarcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730 j ��_�O j �a�[e�_VJan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n�ZaVMarcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730��Ya�WVMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{�Xa�VMarcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111�3�Wa�VMarcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691i�VeqVTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726) `��. � i�aeqWTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726)�*�`e�qWTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �_e�[WTomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed)��^e�GWTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current contexts�]e�WTomáš Mráz <tmraz@redhat.com> - 1.4.11-15V�I�- crontab: use temporary filename properly ignored by crond� �\y�AVOndřej Pohořelský <opohorel@redhat.com> - 1.4.11-25d@- Set 'missingok' for /etc/cron.deny to not recreate it on update - Resolves: rhbz#2059479 � I�,� � �a�fe�_WJan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n�eaWMarcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730��da�WWMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{�ca�WMarcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111�3�ba�WMarcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691 s �D�* s �3�ka�XMarcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691i�jeqXTomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726)�*�ie�qXTomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �he�[XTomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed)��ge�GXTomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current context � ��r� � � h�qikYAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16� �py�AXOndřej Pohořelský <opohorel@redhat.com> - 1.4.11-25d@- Set 'missingok' for /etc/cron.deny to not recreate it on update - Resolves: rhbz#2059479�a�oe�_XJan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n�naXMarcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730��ma�WXMarcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{�la�XMarcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111 � I�f� w�uk�YIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�tk�YIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�siiYAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3�rk�}YIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-join � � � ��yk�YAndreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��xk�%YAndreas Schneider <asn@redhat.com> - 4.10.17-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�wiqYAndreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p�vi�yYAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage * {� * �p�~i�yZAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew�}k�ZIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�|k�ZIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�{iiZAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires��zk�YAndreas Schneider <asn@redhat.com> - 4.10.17-13`�@- related: #1876839 - Fix double crash when requesting share mode lock ( ��� � ( w�k�[Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagc�k_ZAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�k�wZAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��k�ZAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��k�ZAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock�� k�%ZAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�iqZAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks � � � �� k�[Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��k�%[Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�iq[Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p�i�y[Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � {�!M � z�k� [Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P� k�7[Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc� k_[Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p� k�w[Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services�� k�[Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � � � ��k�\Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��k�%\Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�iq\Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p�i�y\Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � {�!M � z�k� \Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�k�7\Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�k_\Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�k�w\Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��k�\Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � �� � �� k�]Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��k�]Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��k�%]Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�iq]Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�{�k� \Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 V ��U V �{�!k� ]Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z� k� ]Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P� k�7]Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc� k_]Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p� k�w]Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services W G�6� � W c�'k_^Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�&k�w^Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��%k�^Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��$k�^Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��#k�%^Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issues�5�"k�]Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict � ,�� � � q�,k{^Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5�+k�^Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{�*k� ^Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z�)k� ^Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�(k�7^Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl � {�!M � z�1k� _Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�0k�7_Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�/k__Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�.k�w_Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��-k�_Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � H�n � z�6k� _Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c�5k__Andreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023q�4k{_Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5�3k�_Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{�2k� _Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 e �r+��V��: � � e D�l � 88400b854d053822b230b8e0402132b7559ddccd811a7abcedeb1406f7bd8cbdD�k � 3f56b1a9c01d9d56c7c61e5e85f89f379f66270b55c609f84ba58194ac11e489D�j � 7b215997f9c81095863133061f447c80e870ef64f74f3d78e13b7f9cbe749027D�i � efa403ad1b6d2564bce0ec54cef3ee401c15f4282733a928d75bb703119161b5D�h � 56345477656cfcf05709f7ed9a7e36814bd7eda39a49f2d5fc436d774aef8e06D�g � b6282c4c1e703d703b92a52a9f3959b4a6412072b5923853674734d4920eb1eeD�f � 650ecdc0d3c0f2d221347461dc47da74b9aeb8041326a30662c310db8452c289D�e � d12d34da150d926afed7f5810b9ebdc562f483d0100cdce78091fd464612301dD�d � fbcc3e564c6dca446a39edd03f346e88b9881d9d18050e89024d0ff48b46240aD�c � 030d403b90d83c7791ba3ea26cc659f709c596898fbfbd5d5f6e4b737a1293faD�b � 4fa63e9cbed9669fb646f612b5c9371ba7bd3f11e6ce5059f28af1cdc7da0780D�a � 80bfd0e65eafbe59f9079ccbd7a8c303269a333e10aaddfce933c3cc81907c66D�` � 435acde66414134bd505e6658dda39972f87e643ec0169c1f4c59a938280fa39 V ��U V �{�;k� `Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z�:k� `Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�9k�7`Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�8k_`Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�7k�w`Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services � G�m�{ � �v�Ai�aAndreas Schneider <asn@redhat.com> - 4.10.15-1^���- related: #1785121 - Rebase to version 4.10.15 - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of - resolves: #1801496 - Add missing ctdb directoriesr�@k}`Andreas Schneider <asn@redhat.com> - 4.10.16-25d��@- resolves: #2222250 - Fix netlogon capabilities level 2z�?k� `Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c�>k_`Andreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023q�=k{`Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5�<k�`Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict H �)�M�+ � H v�Ik�aIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�HiiaAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3�Gk�}aIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh�FikaAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m�EiuaAndreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi�DimaAndreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU�CiEaAndreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057|�Bk�aIsaac Boukris <iboukris@redhat.com> - 4.10.15-2^��- resolves: #1825505 - Compilation of samba sources fails on RHEL M �.�R�0 � M v�Qk�bIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�PiibAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3�Ok�}bIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh�NikbAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m�MiubAndreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi�LimbAndreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU�KiEbAndreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057w�Jk�aIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tag � ��$ � h�UikcAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16k�TiqbAndreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p�Si�ybAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew�Rk�bIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tag � I�f� w�Yk�cIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�Xk�cIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�WiicAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3�Vk�}cIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-join � � � ��]k�cAndreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��\k�%cAndreas Schneider <asn@redhat.com> - 4.10.17-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�[iqcAndreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p�Zi�ycAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage * {� * �p�bi�ydAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew�ak�dIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�`k�dIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�_iidAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires��^k�cAndreas Schneider <asn@redhat.com> - 4.10.17-13`�@- related: #1876839 - Fix double crash when requesting share mode lock ( ��� � ( w�ik�eIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagc�hk_dAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�gk�wdAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��fk�dAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��ek�dAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��dk�%dAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�ciqdAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks � � � ��mk�eAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��lk�%eAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�kiqeAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p�ji�yeAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � {�!M � z�rk� eAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�qk�7eAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�pk_eAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�ok�weAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��nk�eAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � � � ��vk�fAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��uk�%fAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�tiqfAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p�si�yfAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � {�!M � z�{k� fAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�zk�7fAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�yk_fAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�xk�wfAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��wk�fAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � �� � �� k�gAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��k�gAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��~k�%gAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�}iqgAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�{�|k� fAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 V ��U V �{�k� gAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z�k� gAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�k�7gAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�k_gAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�k�wgAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services W G�6� � W c� k_hAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p� k�whAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services�� k�hAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��k�hAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��k�%hAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issues�5�k�gAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict � ,�� � � q�k{hAndreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5�k�hAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{�k� hAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z� k� hAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P� k�7hAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl � {�!M � z�k� iAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�k�7iAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�k_iAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�k�wiAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��k�iAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � H�n � z�k� iAndreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c�k_iAndreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023q�k{iAndreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5�k�iAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{�k� iAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 V ��U V �{� k� jAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z� k� jAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P� k�7jAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc� k_jAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�k�wjAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services � G�m�{ � �v�%i�kAndreas Schneider <asn@redhat.com> - 4.10.15-1^���- related: #1785121 - Rebase to version 4.10.15 - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of - resolves: #1801496 - Add missing ctdb directoriesr�$k}jAndreas Schneider <asn@redhat.com> - 4.10.16-25d��@- resolves: #2222250 - Fix netlogon capabilities level 2z�#k� jAndreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c�"k_jAndreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023q�!k{jAndreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5� k�jAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict H �)�M�+ � H v�-k�kIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�,iikAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3�+k�}kIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh�*ikkAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m�)iukAndreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi�(imkAndreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU�'iEkAndreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057|�&k�kIsaac Boukris <iboukris@redhat.com> - 4.10.15-2^��- resolves: #1825505 - Compilation of samba sources fails on RHEL M �.�R�0 � M v�5k�lIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�4iilAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3�3k�}lIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh�2iklAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m�1iulAndreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi�0imlAndreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU�/iElAndreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057w�.k�kIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tag � ��$ � � �9i�/mTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormallyk�8iqlAndreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p�7i�ylAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew�6k�lIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tag e �r+��V��: � � e D�y � fa6421de2c15921a2e6fedbf4185a77ea6ccb46658a05d2002f389b7e2a8b60eD�x � a9a856900d5a29d9cf94b7fdac8c07e41ad87194e1b959095cdaa6019f30d4c6D�w � 4613273bfc2c11c9816fb2825af9aeec01ebd5785d69700793afafb364fdfa5bD�v � 7e50ed884e06e8b99632be1537d095f84b2961978088e061936f9dc699a523b1D�u � ae5e89ffdb193ba77fff5f91338b3087497c816b899809d1d303e53d659e4ea3D�t � 438a67adb5128df187df7f5745a6afe2d244d1571ecaf4159b03356b32a60436D�s � 36577f1cf5cefd40798e73d112856b462b3290fa90abd70553c107f45542a070D�r � 589706b3e3179980b4ac5c2328bf6ff3d88a995174ce4fa64d0ad480965e67c2D�q � 7ac7d7acc2695d1247889b192c63a490c516efb9b8c1309543008402c549f1ebD�p � 73fc0c87cb3098d277406335ceeb029508b87e5d4f5c7d1cc89eeffaf0bc4009D�o � 3da43cb47b5ad18f1ce3f3b8c4d77981a8aeebe7eeafb778c043bdf4d7883d0eD�n � 50988ba783fc21f380b1867ef9c2f3753fc650d74ce1e24f4f3f94a5284b4dbfD�m � 34171e7570b3702011ad6135ba344acf87732fde15fa9714876fa317e1cfd747 N �b� � N k�?komZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]�>kSmZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212��=k�?mZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*�<k�kmZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]�;kSmZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:�:k� mZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used + u�X� � + ]�EkSnZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:�Dk� nZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� �Ci�/nTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally��Be�#mBryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation��Ak�;mZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]��@k�%mZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var D R�Z�a � D ��Le�#nBryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation��Kk�;nZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]��Jk�%nZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark�IkonZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]�HkSnZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212��Gk�?nZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*�Fk�knZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue - q3�% � - ]�RkSoZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212��Qk�?oZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*�Pk�koZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]�OkSoZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:�Nk� oZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� �Mi�/oTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally �q�[ �:�Xk� pZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� �Wi�/pTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally��Ve�#oBryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation��Uk�;oZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]��Tk�%oZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark�SkooZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212 k ��Z�� k ��_k�;pZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]��^k�%pZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark�]kopZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]�\kSpZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212��[k�?pZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*�Zk�kpZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]�YkSpZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460 � y��L � �*�dk�kqZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]�ckSqZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:�bk� qZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� �ai�/qTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally��`e�#pBryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation U h�y � U ��k_�UrTim Waugh <twaugh@redhat.com> - 1.0.35-21U�b@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279).��je�#qBryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation��ik�;qZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]��hk�%qZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark�gkoqZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]�fkSqZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212��ek�?qZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created Y w�w�u � Y �!�ri�[rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x��- 1816109 - Queues are not cleaned up after stopping cups-browsed - 1811190 - cups-browsed leaks memoryt�qi�rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]��@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketso�piyrZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\��@- 1508018 - man pages: wrong links in man cups-browsed� �oi�1rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\�@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6u�ni�rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\��@- fixing covscan issues, backported from upstream - 1485502��mi�!rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters��li�#rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X� @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found = ��V�E � = � �yi�1sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\�@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6u�xi�sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\��@- fixing covscan issues, backported from upstream - 1485502��wi�!sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters��vi�#sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X� @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found��u_�UsTim Waugh <twaugh@redhat.com> - 1.0.35-21U�b@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279).��ti�CrZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b��@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterq�si}rZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y�@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown ? �r�e � ? �� i�#tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X� @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found��_�UtTim Waugh <twaugh@redhat.com> - 1.0.35-21U�b@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279).��~i�CsZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b��@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterq�}i}sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y�@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown�!�|i�[sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x��- 1816109 - Queues are not cleaned up after stopping cups-browsed - 1811190 - cups-browsed leaks memoryt�{i�sZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]��@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketso�ziysZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\��@- 1508018 - man pages: wrong links in man cups-browsed n x p�� � n q�i}tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y�@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown�!�i�[tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x��- 1816109 - Queues are not cleaned up after stopping cups-browsed - 1811190 - cups-browsed leaks memoryt�i�tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]��@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketso�iytZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\��@- 1508018 - man pages: wrong links in man cups-browsed� �i�1tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\�@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6u�i�tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\��@- fixing covscan issues, backported from upstream - 1485502��i�!tZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters ? g�A�A � ? o�iyuZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\��@- 1508018 - man pages: wrong links in man cups-browsed� � i�1uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\�@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6u� i�uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\��@- fixing covscan issues, backported from upstream - 1485502�� i�!uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters�� i�#uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X� @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found�� _�UuTim Waugh <twaugh@redhat.com> - 1.0.35-21U�b@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279).��i�CtZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b��@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster ) ��p�: � ) ��i�!vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters��i�#vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X� @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found��_�UvTim Waugh <twaugh@redhat.com> - 1.0.35-21U�b@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279).��i�CuZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b��@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterq�i}uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y�@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown�!�i�[uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x��- 1816109 - Queues are not cleaned up after stopping cups-browsed - 1811190 - cups-browsed leaks memoryt�i�uZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]��@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets ] ���j � ] �� i�CvZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b��@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterq�i}vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y�@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown�!�i�[vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x��- 1816109 - Queues are not cleaned up after stopping cups-browsed - 1811190 - cups-browsed leaks memoryt�i�vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]��@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketso�iyvZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\��@- 1508018 - man pages: wrong links in man cups-browsed� �i�1vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\�@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6u�i�vZdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\��@- fixing covscan issues, backported from upstream - 1485502 - q3�% � - ]�"kSwZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212��!k�?wZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*� k�kwZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]� kSwZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:� k� wZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� � i�/wTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally �q�[ �:�(k� xZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� �'i�/xTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally��&e�#wBryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation��%k�;wZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]��$k�%wZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark�#kowZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212 k ��Z�� k ��/k�;xZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]��.k�%xZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark�-koxZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]�,kSxZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212��+k�?xZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*�*k�kxZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]�)kSxZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460 of flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��' ��, ��1 ��6 ��; ��A ��I ��Q ��U ��Y ��] ��b ��i ��m ��r ��v ��{ �� �� �� �� �� �� �� ��% ��- ��5 ��9 ��? ��E ��L ��R ��X ��_ ��d ��k ��r ��y �� �� �� �� �� ±" ñ( ı/ Ʊ4 DZ; ɱA ʱF ˱N ̱T ͱ[ α` ϱe бj ѱo ұt ӱy Ա~ ղ ֲ ײ ز ٲ ڲ ۲! ܲ& ݲ+ 0 ߲5 �: �? �D �I �N �S �X �] �b �g �l �q �v �{ � � � � � � �� ��# ��( ��- ��2 ��8 ��< ��A ��E ��J �N �T �X �^ �b �h �o �v �| � � y��L � �*�4k�kyZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]�3kSyZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:�2k� yZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used� �1i�/yTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally��0e�#xBryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation c h�y � c � �;i�/zTomas Korbar <tkorbar@redhat.com> - 1:1.6.3-43]L�- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally��:e�#yBryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation��9k�;yZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]��8k�%yZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /vark�7koyZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]�6kSyZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212��5k�?yZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created e �r+��V��: � � e D� � 4a53adae3dd3a8d933f2ec113b7303ce7d9c782edd612d17b8d3badf4c04167eD� � 46ac94286722fc2f6f68ec4c0e70152b3d1ff6fac6001d2155f8228d91126574D� � 816c816facf8421458376b99f244ef91c147063ed4f4955fd0e8dae62eccaeb8D� � c75dd0b94b1e1300b04edfbfa5a3739573a6f83dc0737110d2f8cfedfc5ab7a2D� � da2b0ffc968803d239f38444842e6792e85494901ff8d0075652f6c2d7aa1800D� � 46f713cd31041330e2739c5a644e4f598536096f3e39d6c667a6d044eaa87893D� � b2e43341cc469f66b5495139b62a419c0c671b19535efcdc79df055cc43686e5D� � cf7edef3f54d6a2816515812d2f679ae21bbfb26767bf64e34b73d19a3bce3aeD�~ � 8180d23815951b3c5be397846577728116502dad35bbc2dd67b7c4188244e465D�} � 5a07757ffcab76dc74eef1e1537c4ea823f723bae2c05ab1dd29679d95478db1D�| � a979b1653b72f0551faf8fa54eed42be4d51511d962ed09d02ece63f2402d5f7D�{ � dfc95bdd8057839d4b45153318acb4e09f4da257afee1c57c07781870a68ecefD�z � c9fd3024d128c4accf8a1b5a9b3207e10e714a336f6fe04b88a1d557e2bc7a24 N �b� � N k�AkozZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-49^F��- more covscan issues raised from the fix 1672212]�@kSzZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-48^F��- fixing covscan issue from 1672212��?k�?zZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-47^F��- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created�*�>k�kzZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-46^B�@- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue]�=kSzZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-45^;��- fixing covscan issue from 1774460�:�<k� zZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-44^8 @- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7] - 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7] - 1753809 - Settings in ~/.cups/client.conf aren't used A u�X� A � �Fc�1{Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)��Ec�+{Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)��De�#zBryan Mason <bmason@redhat.com> - 1:1.6.3-52d�h�- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation��Ck�;zZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-51^���- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]��Bk�%zZdenek Dohnal <zdohnal@redhat.com> - 1:1.6.3-50^{G�- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var 6 ��)�7 � 6 v�Ns}{Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)��Mc�'{Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)��Lc�%{Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h�Kcq{Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|�Jc�{Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h�Icq{Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j�Hcu{Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}�Gc�{Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) 1 s�� � 1 h�Tcq|Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|�Sc�|Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h�Rcq|Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j�Qcu|Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}�Pc�|Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� �Oc�1|Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292) � y�x�j � N�[a?}Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�Zci}Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�Yio}Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)� �Xw�E|Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&�- fix HTTP proxy deny use after free (CVE-2022-43552) - rebuild certs with 2048-bit RSA keysv�Ws}|Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)��Vc�'|Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)��Uc�%|Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482) * �s � � * n�`c}}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�_cc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�^_�}Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��]c�#}Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��\_�)}Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�ea?~Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�dci~Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�cio~Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�b]o}Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�acg}Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�jc}~Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�icc~Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�h_�~Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��gc�#~Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��f_�)~Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�oa?Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�nciHonza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�mioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�l]o~Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�kcg~Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�tc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�sccJakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�r_�Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��qc�#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��p_�)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�ya?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�xci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�wio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�v]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�ucgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�~c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�}cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�|_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��{c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��z_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d� ]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N� a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d� ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j� io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d� ]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c� cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n� c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�!a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d� ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j� io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d� ]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c� cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�&c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�%cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�$_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��#c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��"_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�+a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�*ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�)io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�(]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�'cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�0c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�/cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�._��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��-c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��,_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�5a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�4ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�3io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�2]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�1cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�:c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�9cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�8_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��7c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��6_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�?a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�>ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�=io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�<]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�;cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) e �r+��V��: � � e D� � d008be734234764be6a4c1b2f1c97cad53b746ecc9d1086444715833c6eb8450D� � 9fc8f4ae81c019b16a882823948eff561fe0f6ad38be509f514a5c287a60d121D� � b1fa72dca82442418098746eaa9881ac7e92678c41e6786a458c28d77235fd5eD� � 4fc0e17577976ecf2487198134b9f2656bdc36caf8e27c75efb6aff14204088eD� � 925078e3fe326e7212b074bf495287d0fafc0395d9657b439a01b27d1539037eD� � c960158be24b783ab7fb4a317899b83f806692c1e48426fe46c6bee909357ee5D� � 5a42bda7621305ca3bcd588a0c84aac743aba372ea8ee558945564b62173e3f3D� � 995c318e872c57fa7ce17355320c34d3fdd0774343e691cc23d9e9215ad53931D� � 94d6c80d9b08af719fa8a5e007bf753a3f13406d99bcd8411d914c6115c3b571D� � c92bf980488dff6128c5564f2f75712ccb2a9a0f859f4667af435f967eef4c45D� � ffcf7016d990141a16d89aca74ebc89f797e93581bb8c97a08c83f5bf4ae47e4D� � e1d065bfaef705d407c6134352d1afc64ecf26a5970a0e5282f6dda745483db8D� � 4579c7a7925097881dd33b28c72cce227a024a5f071fa4cd0c5bb09cd76d8ec0 * �s � � * n�Dc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�Ccc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�B_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��Ac�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��@_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�Ia?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�Hci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�Gio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�F]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�Ecg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�Nc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�Mcc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�L_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��Kc�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��J_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�Sa?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�Rci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�Qio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�P]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�Ocg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�Xc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�Wcc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�V_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��Uc�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��T_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�]a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�\ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�[io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�Z]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�Ycg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�bc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�acc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�`_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��_c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��^_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�ga?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�fci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�eio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�d]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�ccg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�lc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�kcc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�j_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��ic�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��h_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�qa?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�pci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�oio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�n]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�mcg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�vc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�ucc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�t_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��sc�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��r_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�{a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�zci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�yio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�x]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�wcg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n� c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�~_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��}c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��|_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n� c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a� cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j� io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d� ]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c� cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n� c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a� cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q� _��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�#a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�"ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�!io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d� ]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c� cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�(c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�'cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�&_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��%c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��$_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�-a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�,ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�+io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�*]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�)cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�2c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�1cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�0_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��/c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��._�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) K �3�� � K � �8[�9�Jeff Moyer <jmoyer@redhat.com> - 64.1-2\�e�- Fix initramfs creating by forcing installation of libnvdimm.ko - Related: bz#1634348�?�7[�%�Jeff Moyer <jmoyer@redhat.com> - 64.1-1\��@- Rebase to v64.1 (Jeff Moyer) - add security commands - fix broken udev rule for dirty shutdown count - Resolves: bz#1634348 bz#1635441�)�6W�}�Jeff Moyer <jmoyer@redhat.com> - 62-1[~��- Rebase to v62 (Jeff Moyer) - a new monitor command / daemon - an ndctl udev rule for recording the unsafe shutdown count - smart error injection - create-namespace fix for fragmented namespaces - Resolves: bz#1610649 bz#1611833 bz#1456320h�5[y�Jeff Moyer <jmoyer@redhat.com> - 60.3-4[^��- Apply all patches (Jeff Moyer) - Related: bz#1456320d�4]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�3cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) C ^� � C � �<_�9�Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT�- Add spaces to the add_driver directive in the dracut module - Resolves: rhbz#1740383�4�;_� �Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik�- modify nvdimm-security.conf touse '&&' instead of ';' Without this change, the module doesn't load - Resolves: rhbz#1725405�P�:_�C�Jeff Moyer <jmoyer@redhat.com> - 65.2.el7]>�- Remove 'daxctl migrate-device-model' command. We won't support hot-plugging device dax into the memory hierarchy on RHEL 7. - Resolves: rhbz#1734153� �9_�_�Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9��- Rebase to v65 - clear-errors: new command to clear errors on a namespace - monitor: remove the requirement of a default config - sanitize-dimm: allow a zero-key for secure-erase - sanitize-dimm: preserve keys after an overwrite - load-keys: fix for non-TPM keys - Fix test harness to run against the rhel7 test kernel modules - Related: rhbz#1722481 � ��c � �?�A[�%�Jeff Moyer <jmoyer@redhat.com> - 64.1-1\��@- Rebase to v64.1 (Jeff Moyer) - add security commands - fix broken udev rule for dirty shutdown count - Resolves: bz#1634348 bz#1635441�)�@W�}�Jeff Moyer <jmoyer@redhat.com> - 62-1[~��- Rebase to v62 (Jeff Moyer) - a new monitor command / daemon - an ndctl udev rule for recording the unsafe shutdown count - smart error injection - create-namespace fix for fragmented namespaces - Resolves: bz#1610649 bz#1611833 bz#1456320h�?[y�Jeff Moyer <jmoyer@redhat.com> - 60.3-4[^��- Apply all patches (Jeff Moyer) - Related: bz#1456320� �>_�#�Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ�- add space to install_items in dracut config file - Resolves: rhbz#1909233~�=_� �Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w�@- Once again attempt to fix nvdimm-security.conf - Resolves: rhbz#1750199 e �r+��V��: � � e D� � 917535cc1bccdcfa4383143cc52d13f8fd161a5ec8f1037f606123737f818acfD� � 39c70285432c56fe5dd79f0d155069d48956d10fcdcac838a4590c4a44b0b521D� � 88e796afa3934d3cefb09a6a575714bdc8aede8ee6a3c6b7be0bb59a130d5efdD� � cab18530e297449d292d630ec6e205013f25a4889616836298778283e58c4646D� � e5b4fe58bfeb115113e7edd7fb472941f60801137b90d42e57b06b22865ac47dD� � a18e979a837324a9730fc3e5b08e4f228f22d46c20c0a6445f7147444b8449c3D� � 2ed2fcd8e79d8a62a374c054083792b657cb4d4668e39188deeb1ad3d72c948fD� � d7480f6ca0e1f89838274cae938826c82a1a691a1f3fa5dc9b3eda6662d64f7bD� � dd427ef9920f27966d5b507f154c88d80a03bc944b494a89f98eae387f25e950D� � b063de6c9fdc361af76d98bb3d3b31fd5ee05e120f1dc64f9ddfe77217c012c6D� � 3f1d1aaf2ad1912b72db538da9e7a824ec1beb3f7eceb8da6ab8b296c810b913D� � 8c8d68b411cf4b1553f6d61ec9e5e792aab640f1b6ce5645df2f4da01896ad23D� � 8e01728503e8663cde52ff2eb87bcbcd9a04b60fa17e1729dc2658f1cce309dc E s� � E �4�E_� �Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik�- modify nvdimm-security.conf touse '&&' instead of ';' Without this change, the module doesn't load - Resolves: rhbz#1725405�P�D_�C�Jeff Moyer <jmoyer@redhat.com> - 65.2.el7]>�- Remove 'daxctl migrate-device-model' command. We won't support hot-plugging device dax into the memory hierarchy on RHEL 7. - Resolves: rhbz#1734153� �C_�_�Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9��- Rebase to v65 - clear-errors: new command to clear errors on a namespace - monitor: remove the requirement of a default config - sanitize-dimm: allow a zero-key for secure-erase - sanitize-dimm: preserve keys after an overwrite - load-keys: fix for non-TPM keys - Fix test harness to run against the rhel7 test kernel modules - Related: rhbz#1722481� �B[�9�Jeff Moyer <jmoyer@redhat.com> - 64.1-2\�e�- Fix initramfs creating by forcing installation of libnvdimm.ko - Related: bz#1634348 � q�l � �)�JW�}�Jeff Moyer <jmoyer@redhat.com> - 62-1[~��- Rebase to v62 (Jeff Moyer) - a new monitor command / daemon - an ndctl udev rule for recording the unsafe shutdown count - smart error injection - create-namespace fix for fragmented namespaces - Resolves: bz#1610649 bz#1611833 bz#1456320h�I[y�Jeff Moyer <jmoyer@redhat.com> - 60.3-4[^��- Apply all patches (Jeff Moyer) - Related: bz#1456320� �H_�#�Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ�- add space to install_items in dracut config file - Resolves: rhbz#1909233~�G_� �Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w�@- Once again attempt to fix nvdimm-security.conf - Resolves: rhbz#1750199� �F_�9�Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT�- Add spaces to the add_driver directive in the dracut module - Resolves: rhbz#1740383 : =� : �P�N_�C�Jeff Moyer <jmoyer@redhat.com> - 65.2.el7]>�- Remove 'daxctl migrate-device-model' command. We won't support hot-plugging device dax into the memory hierarchy on RHEL 7. - Resolves: rhbz#1734153� �M_�_�Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9��- Rebase to v65 - clear-errors: new command to clear errors on a namespace - monitor: remove the requirement of a default config - sanitize-dimm: allow a zero-key for secure-erase - sanitize-dimm: preserve keys after an overwrite - load-keys: fix for non-TPM keys - Fix test harness to run against the rhel7 test kernel modules - Related: rhbz#1722481� �L[�9�Jeff Moyer <jmoyer@redhat.com> - 64.1-2\�e�- Fix initramfs creating by forcing installation of libnvdimm.ko - Related: bz#1634348�?�K[�%�Jeff Moyer <jmoyer@redhat.com> - 64.1-1\��@- Rebase to v64.1 (Jeff Moyer) - add security commands - fix broken udev rule for dirty shutdown count - Resolves: bz#1634348 bz#1635441 H�8�I �)�TW�}�Jeff Moyer <jmoyer@redhat.com> - 62-1[~��- Rebase to v62 (Jeff Moyer) - a new monitor command / daemon - an ndctl udev rule for recording the unsafe shutdown count - smart error injection - create-namespace fix for fragmented namespaces - Resolves: bz#1610649 bz#1611833 bz#1456320h�S[y�Jeff Moyer <jmoyer@redhat.com> - 60.3-4[^��- Apply all patches (Jeff Moyer) - Related: bz#1456320� �R_�#�Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ�- add space to install_items in dracut config file - Resolves: rhbz#1909233~�Q_� �Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w�@- Once again attempt to fix nvdimm-security.conf - Resolves: rhbz#1750199� �P_�9�Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT�- Add spaces to the add_driver directive in the dracut module - Resolves: rhbz#1740383�4�O_� �Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik�- modify nvdimm-security.conf touse '&&' instead of ';' Without this change, the module doesn't load - Resolves: rhbz#1725405 : =� : �P�X_�C�Jeff Moyer <jmoyer@redhat.com> - 65.2.el7]>�- Remove 'daxctl migrate-device-model' command. We won't support hot-plugging device dax into the memory hierarchy on RHEL 7. - Resolves: rhbz#1734153� �W_�_�Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9��- Rebase to v65 - clear-errors: new command to clear errors on a namespace - monitor: remove the requirement of a default config - sanitize-dimm: allow a zero-key for secure-erase - sanitize-dimm: preserve keys after an overwrite - load-keys: fix for non-TPM keys - Fix test harness to run against the rhel7 test kernel modules - Related: rhbz#1722481� �V[�9�Jeff Moyer <jmoyer@redhat.com> - 64.1-2\�e�- Fix initramfs creating by forcing installation of libnvdimm.ko - Related: bz#1634348�?�U[�%�Jeff Moyer <jmoyer@redhat.com> - 64.1-1\��@- Rebase to v64.1 (Jeff Moyer) - add security commands - fix broken udev rule for dirty shutdown count - Resolves: bz#1634348 bz#1635441 H�8�I �)�^W�}�Jeff Moyer <jmoyer@redhat.com> - 62-1[~��- Rebase to v62 (Jeff Moyer) - a new monitor command / daemon - an ndctl udev rule for recording the unsafe shutdown count - smart error injection - create-namespace fix for fragmented namespaces - Resolves: bz#1610649 bz#1611833 bz#1456320h�][y�Jeff Moyer <jmoyer@redhat.com> - 60.3-4[^��- Apply all patches (Jeff Moyer) - Related: bz#1456320� �\_�#�Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ�- add space to install_items in dracut config file - Resolves: rhbz#1909233~�[_� �Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w�@- Once again attempt to fix nvdimm-security.conf - Resolves: rhbz#1750199� �Z_�9�Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT�- Add spaces to the add_driver directive in the dracut module - Resolves: rhbz#1740383�4�Y_� �Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik�- modify nvdimm-security.conf touse '&&' instead of ';' Without this change, the module doesn't load - Resolves: rhbz#1725405 : =� : �P�b_�C�Jeff Moyer <jmoyer@redhat.com> - 65.2.el7]>�- Remove 'daxctl migrate-device-model' command. We won't support hot-plugging device dax into the memory hierarchy on RHEL 7. - Resolves: rhbz#1734153� �a_�_�Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9��- Rebase to v65 - clear-errors: new command to clear errors on a namespace - monitor: remove the requirement of a default config - sanitize-dimm: allow a zero-key for secure-erase - sanitize-dimm: preserve keys after an overwrite - load-keys: fix for non-TPM keys - Fix test harness to run against the rhel7 test kernel modules - Related: rhbz#1722481� �`[�9�Jeff Moyer <jmoyer@redhat.com> - 64.1-2\�e�- Fix initramfs creating by forcing installation of libnvdimm.ko - Related: bz#1634348�?�_[�%�Jeff Moyer <jmoyer@redhat.com> - 64.1-1\��@- Rebase to v64.1 (Jeff Moyer) - add security commands - fix broken udev rule for dirty shutdown count - Resolves: bz#1634348 bz#1635441 ' H�8� � ' ��h{��David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.46-1[�@- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)��g{��David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1[W�- network: parsing of /proc/mounts returned (bug #1572659) - netconsole: LSB header added (bug #1508489) - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)� �f_�#�Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ�- add space to install_items in dracut config file - Resolves: rhbz#1909233~�e_� �Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w�@- Once again attempt to fix nvdimm-security.conf - Resolves: rhbz#1750199� �d_�9�Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT�- Add spaces to the add_driver directive in the dracut module - Resolves: rhbz#1740383�4�c_� �Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik�- modify nvdimm-security.conf touse '&&' instead of ';' Without this change, the module doesn't load - Resolves: rhbz#1725405 + ���& � + c�oai�Jan Macku <jamacku@redhat.com> - 9.49.53-1^Ǿ�- rwtab: Add support for chrony (bug #1838260)��na�C�Jan Macku <jamacku@redhat.con> - 9.49.52-1^�x�- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)Z�maW�Jan Macku <jamacku@redhat.com> - 9.49.51-1^r @- Fix inline comment - (bug #1773798)��la�C�Jan Macku <jamacku@redhat.com> - 9.49.50-1^h�- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)� �ka�]�Jan Macku <jamacku@redhat.com> - 9.49.49-1]Z�@- ifup-eth: Check that device name is set (bug #1741830) - Add option for IPv6 GRE tunnel (bug #1691552)�a�ja�c�Jan Macku <jamacku@redhat.com> - 9.49.48-1]Ik�- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977) - Configure autorelabel service to output to journal and to console if set (bug #1634661) - Fix changelog typo^�ia_�Jan Macku <jamacku@redhat.com> - 9.49.47-1\��- Fix file permissions for /var/log/dmesg } � � | � } c�vsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��us�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �ts�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �ss�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�rsu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�q�Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.n�pqo�Jan Macku <jamacku@redhat.com> - 9.49.53-1.el7_9.1_���- rwtab: Allow updating mlocate.db (bug #1880095) n r�� n � �|s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�{su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.� �z���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�y�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��x�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �ws�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load. � s�t�[ � �Q��� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.���� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� � s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��~s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �}s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1. @ r�Z�4 � @ � � s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t��g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� ����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected. d u�� � d m��Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.�C����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t� �g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� � ���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q� �� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.�� �� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize. E ��]�^ � E ���� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details. � +�-� � � � s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m��Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.� ����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � gs� � � �"���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�!�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.�� �� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� � s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c� sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.�� s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. E ��]�^ � E ��)�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �(s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�'sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��&s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �%s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �$s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�#su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details. � +�&� � � �/s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �.s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�-su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.t�,�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �+���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�*�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � gs� � � �5���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�4�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��3�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �2s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�1sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��0s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. C ��[�\ � C ��<�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �;s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�:sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��9s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �8s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �7s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t�6�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters. 1 +�&_ � 1 � �Bs�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �As�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.�C�@���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�?�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �>���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�=�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. e �r+��V��: � � e D�- � 12fb546150a8175c1aa95419a75e512972cb4c6c8eea1ade84e3319b1cfadaeaD�, � c8f7c98bcb2f070e4421790cc39453b0046912b5c8325ad6660342177869da6eD�+ � e3048df9af89b5496455f0ad788ff0b492712c8c06683cf6f908894638139c9fD�* � a7f93d258bd14e3d81be8c58b2998d78081d84b5f8f763c1bff64b3571ca321eD�) � dabd6fc3fcccc9d794b28168afdd8fb94f2d78fda10a5751459cee469f8412d4D�( � 0986dce8e3a59471cabc7ed457e23c3f0fdc81e3cbab4093eaa0426e2d5d26efD�' � 3feced91f7391352cfca0debae0c2aa43febbeee7d24929c75cd8d1d5a6b782eD�& � 06a5cb180f3ca29cdae7dd9547b29c30079ef85e1809389608777308ad5e4c3aD�% � 9e77aa7192e0e6ca06b1a23c5e174410e0034b59dedc6cc1edf7458486f920edD�$ � 23c887a392429ec463dea994475481a04b8745d5f29926c149d6f3f48c5ebde0D�# � 96abc02747879aa68bd335dadad5f1e2d5ea64c519db929820194757e80af933D�" � 4c4e8afba69331a45497c224ebaa7b237c5e25c3fa2dba00bb45fa49fc41aed8D�! � af5e8ccb9d54f4f9b71774537a4c1e69aad8ae1b83815d24f5930bb72e20d0f8 � gs� � � �H���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�G�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��F�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Es�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�DsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Cs�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. ��R�< � ��Os�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Ns�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Ms�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�Lsu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�K�Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.�C�J���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�I�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters. � � �� � r�Usu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.� �T���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�S�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��R�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Qs�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�PsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. � _�9�E � ��[�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Zs�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�YsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Xs�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Ws�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Vs�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script. _ +�&� � _ ��as�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �`s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �_s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t�^�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �]���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�\�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � � �� � t�g�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �f���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�e�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��d�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �cs�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�bsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. ' 9�T�& � ' c�nsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��ms�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �ls�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �ks�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�jsu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�i�Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.�C�h���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG. � r�� � r�tsu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�s�Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.� �r���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�q�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��p�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �os�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load. � _�9�E � ��z�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �ys�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�xsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��ws�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �vs�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �us�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script. a +�(� � a �� s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �~s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�}su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.� �|���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�{�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. 2 � �� � 2 r�su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.t��g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� ����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.���� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. � _�9�E � �� �� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� � s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c� sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.�� s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� � s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script. _ +�&� � _ ��s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t��g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� ����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � � �� � t��g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� ����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.���� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. ~ 9� r ~ � � s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c� sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.�� s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� � s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.�C����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG. d u�� � d m�%�Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.�C�$���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�#�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �"���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�!�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.�� �� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize. E ��]�^ � E ��,�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �+s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�*sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��)s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �(s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �'s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�&su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details. � +�-� � � �2s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �1s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�0su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�/�Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.� �.���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�-�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � gs� � � �8���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�7�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��6�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �5s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�4sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��3s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. E ��]�^ � E ��?�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �>s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�=sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��<s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �;s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �:s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�9su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details. � +�&� � � �Es�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Ds�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�Csu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.t�B�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �A���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�@�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. e �r+��V��: � � e D�: � 3c12cdb5717ff04a0dcf949d40ddef5d878342fe63c8cf26ece6f2f0f56c9075D�9 � 1594da41bb4b69a611ac9e605dec625b69dd2f867a53943a544a8babfb76594cD�8 � 0cfe90113fcfe21d6f21f6022481283b9b35ca916c02484fc39e89b88fcffa8aD�7 � 43561875a5de2607f06bea160d4eb38c49eb95d2de1193d32c75d69bbef928deD�6 � a3db401db86968bf26b166686f43ca87a750990d0b9e46fad7c8f63e89052035D�5 � a12a8a2185579f6577042b3b9876e89a3c3c99ff67c168c0388c79d64d4d9854D�4 � 40ebdc19d1f43fa0892059019bcdba4bd97351c6d146ef74e530e00dc4732c4cD�3 � 85c0d75554f340d99942609a8488c0ad5b2e4ddc0e40c1192056ab8ab8395492D�2 � 1cb65029ad75fd77a7975a1a11ecf00d33c40ae006a565c6b49188cb7f9eb6ccD�1 � c5ef38f748c2f2a1c21e14d6274fec8b3391722d8c6c93cdd5f977075f798d88D�0 � 6cbada440eaf05d5c86416fab118a0ab641f93992a6a4070b19938894fcb8bbbD�/ � 01a6f6a9a36d8203819ae336a672955e40e9b1c9cf387d5ccd0942ebea8c147aD�. � 68e1429d8531b268902804fdf15f6eb8ffcadc2d36315c6090a3edb14eb2ab13 � gs� � � �K���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�J�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��I�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Hs�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�GsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Fs�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. C ��[�\ � C ��R�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Qs�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�PsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Os�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Ns�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Ms�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t�L�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters. 1 +�&_ � 1 � �Xs�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Ws�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.�C�V���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�U�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �T���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�S�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � gs� � � �^���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�]�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��\�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �[s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�ZsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Ys�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. ��R�< � ��es�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �ds�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �cs�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�bsu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�a�Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.�C�`���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�_�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters. 9 � �� � 9 r�lsu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�k�Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.� �j���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�i�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��h�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �gs�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�fsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. � _�9�E � ��r�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �qs�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�psW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��os�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �ns�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �ms�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script. a +�(� � a ��xs�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �ws�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �vs�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�usu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.� �t���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�s�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. 2 � �� � 2 r�su�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.t�~�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �}���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�|�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��{�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �zs�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�ysW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. � _�9�E � ���� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� � s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script. _ +�&� � _ �� s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� � s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� � s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t��g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� ����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � � �� � t��g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� ����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.���� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� � s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c� sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. ~ 9� r ~ � �s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��s�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �s�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.�C����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG. � u�� � �C� ���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t��g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� ����Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.���� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize. � �C � � � q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556�� q�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� � q�K�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 M M �/� q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 of ~flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� � � � �" �) �/ �5 �< �B �H �O �U �[ �a �g �n �t �z � � � !� "� #� $�% %�, &�2 '�8 (�? )�E +�K ,�R -�X .�^ /�e 0�l 1�r 2�x 3� 4� 5� 6� 7� 8� 9� :� <�# =�' >�( ?�) @�, A�0 B�1 C�2 D�5 E�: F�= G�> H�A I�E K�G L�H M�K N�O O�P P�Q Q�T R�Y S�Z T�[ U�^ V�b W�c X�d Y�g Z�l [�m \�n ]�q ^�v _�y `�z a�} b� c� d� e� f� g� h� i� j� k� l� m� n� o� p� q�# r�( s�) t�* u�- v�2 w�5 x�6 y�9 z�= {�> |�? }�B � Q � �0�#q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�"q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�!q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 $ ,@�$ ��'q�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}�&q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�%q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�$q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �(q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�)q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�,q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�+q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�*q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 & ,@�& ��0q�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�/q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�.q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�-q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �1q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�2q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�5q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�4q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�3q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��:q��Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��9q�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�8q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�7q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�6q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � �C � � �=q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��<q�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� �;q�K�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 M M �/�>q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�Aq�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�@q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�?q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@� � � �Eq�K�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651}�Dq� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�Cq�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�Bq�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 e �r+��V��: � � e D�G � 3d901cc9a4697e9c08105de93d1a190650a8439e1dabe11a97d17c67cd1d951cD�F � 09d536dbeed2bb97193afabb9564cc6e6def3636f719ed0e3bbb8c0e575f7033D�E � c1769c3e3380140052696701ca6809cb191ea6c245caf1c658a1b8bc580f13baD�D � 393b6f38ca21b31f198eb40d2fbdecb79a43ca0306ac436c4ebcc4fc8a15043aD�C � 61772a9e48d677eb7feb9225da4fdbfa417f99764a26adf0ba4e311baad2696cD�B � ec4cb2d5a569d854ac525bd458045223e598500765770d860e5bf0b84a41767bD�A � fe463cbf93e98cd763c89bf55103a9c84e8d48e998eb06542fe3e3fb72a10dd9D�@ � 34ff7de8a4ca78de046e416a969184543fb961e44c8500ad933f5d0d9d71bdb4D�? � 1333d18f0d5f36acf0badba03a7250ddf92df7f789f4674ece2dfcfcd925f3b3D�> � 8bf0a6fa452bb777d2800beaf0ba2e84f3dd1b17964e1b1bb26b099bcd5ba413D�= � 49c502046e8fd1833a810286c8db37a87f18dc47667827f45a56267aefdac60fD�< � 973cf0ccc163c9374db09502b1e69f3323abc0960eca2ad66bfae874ac23d131D�; � 4800c473b78c5271f956b53fa3f8a3f696c8b2709fa3afd5457178a5946300eb � d� � �Gq�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��Fq�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651 M M �/�Hq�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�Kq�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�Jq�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�Iq�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 $ ,@�$ ��Oq�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}�Nq� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�Mq�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�Lq�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �Pq�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�Qq�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�Tq�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�Sq�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�Rq�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��Yq�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651��Xq�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�Wq� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�Vq�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�Uq�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �Zq�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�[q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�^q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�]q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�\q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 & ,@�& ��bq�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�aq� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�`q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�_q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �cq�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�dq�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�gq�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�fq�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�eq�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��lq��Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��kq�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�jq� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�iq�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�hq�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �mq�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�nq�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�qq�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�pq�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�oq�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��vq��Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��uq�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�tq� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�sq�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�rq�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � �C � � �yq�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��xq�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� �wq�K�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 M M �/�zq�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�}q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�|q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�{q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@� � � �q�K�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651}� q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�~q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � d� � �q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��q�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651 M M �/�q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 $ ,@�$ �� q�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}� q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h� q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � � q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/� q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��q�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651��q�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 & ,@�& �� q�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}� q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h� q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � � q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/� q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�#q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�"q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�!q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��(q��Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��'q�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�&q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�%q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�$q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �)q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�*q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�-q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�,q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�+q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��2q��Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��1q�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�0q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�/q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�.q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � �C � � �5q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��4q�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� �3q�K�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 M M �/�6q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�9q�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�8q�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�7q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 $ ,@�$ ��=q�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}�<q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�;q�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�:q�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �>q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�?q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�Bq�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�Aq�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�@q�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 & ,@�& ��Fq�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�Eq� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�Dq�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�Cq�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 e �r+��V��: � � e D�T � 7f4ef7b8732bcac3d9fd39fa13b53c8401e618cc64cf7e86b46a6a0bf9f5ae93D�S � 211c26bfbf530d58f28b3bff1ac40338e642a96b7252fd6857fcb26e533c5790D�R � bfebf9b332bfdd37851d0e28304a7388d0da7c5c2ba905903d1294494041b80bD�Q � 30c56f4f794204c049aed74f749c3b0b0739f232b66c48497f125252af988405D�P � b1b8c61d7f414e0bff5b987279a268865b3400e4618cc614c0e2852dd52aef50D�O � 31e1c574e3fa3fef3b015e2b2e1d685b860a8b96e7151d331b9ef708986965c3D�N � 33747e3cee335e0df270058b70d2ce33f91cadb372c26e1a24641083294b45b2D�M � a288bfc4e0cabe06d845847deb1b0bbdf10a01f9707476ebbf61f3bc2e99e2a0D�L � 2d5e71a837c196e47d9d4ea6dfd48be8ec78faaf662f54465992a8340399b0ccD�K � 35b3f04497e7cd33947d10c42841c8a302879e0665aff842a760e318a83d90aaD�J � 33fa2846ccf25385f17ff97c1999aeae26f83868dcd26164e5524c4255cb1ce1D�I � 31cb8b4500b30fc437c8e439643e9d1afd49b8c687a8be5c9b39c44c31f51d44D�H � fce2a6c0ec49c42d5100944108bbb85b8a3e2685de9b583b1b4627e6f66b330e q q � �Gq�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�Hq�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�Kq�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�Jq�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�Iq�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��Pq��Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��Oq�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�Nq� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�Mq�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�Lq�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 " )�S�i � � " [�XiQ�Marian Csontos <mcsontos@redhat.com> - 0.8.5-3^���- Check input file exists earlier.y�Wi� �Marian Csontos <mcsontos@redhat.com> - 0.8.5-2]��@- Remove obsolete pool-inactive option from thin_trim man page.j�Vio�Marian Csontos <mcsontos@redhat.com> - 0.8.5-1\�F@- Additional fixes for thin_dump and thin_repair.j�Uio�Marian Csontos <mcsontos@redhat.com> - 0.8.2-1\��@- Fix tools requiring additional --repair option.z�Ti� �Marian Csontos <mcsontos@redhat.com> - 0.8.1-1\�~�- Update to latest upstream release including various bug fixes.n�Siw�Marian Csontos <mcsontos@redhat.com> - 0.7.3-3Z �- Fix version 2 metadata corruption in cache_restore.b�Ri_�Marian Csontos <mcsontos@redhat.com> - 0.7.3-2Yܶ@- Rebuilding with updated source tarball.�S�Qi�?�Marian Csontos <mcsontos@redhat.com> - 0.7.3-1Y�p@- Update to latest bugfix and documentation update release. - *_restore tools wipe superblock as a last resort. - Add thin_check --override-mapping-root. ) v�� � ) � �`k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�_ko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�^k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�]k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �\k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��[k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up eventsX�Zy;�Marian Csontos <mcsontos@redhat.com> - 0.8.5-3.el7_9.2_h��- Rebuild for Z stream.��Yy��Marian Csontos <mcsontos@redhat.com> - 0.8.5-3.el7_9.1_a�@- Underpopulated nodes are considered non fatal error by thin_check. � �-�w�{ � � k�hko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�gk� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�fk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �ek��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\�d}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�co=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�bk=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�ak� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode m |��R�w � m � �pk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��ok��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\�n}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff�- Roll in CentOS Brandingy�mi� �Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM�@- Rebuild because of bind ABI changes related to CVE-2023-50387T�lo=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�kk=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�jk� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �ik��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects � � ��E � � \�x}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�wo=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�vk=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�uk� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �tk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�sko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�rk� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�qk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib j |�� � j T� o=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�k=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�~k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �}k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�|ko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�{k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�zk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �yk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase 3 �%��% � 3 � �k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�ko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\�}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff�- Roll in CentOS Brandingy�i� �Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM�@- Rebuild because of bind ABI changes related to CVE-2023-50387 � �-�w�{ � � k�ko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� � k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\� }?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT� o=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R� k=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{� k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode m |��R�w � m � �k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\�}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff�- Roll in CentOS Brandingy�i� �Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM�@- Rebuild because of bind ABI changes related to CVE-2023-50387T�o=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�k=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects � � ��E � � \� }?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT� o=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R� k=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{� k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� � k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�ko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib ; z�~ � � ; R�(k=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�'k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �&k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�%ko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�$k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�#k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �"k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��!k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events ` �J�N�b � ` {�0k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �/k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�.ko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�-k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�,k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �+k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\�*}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�)o=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217 � �T�y�} � � k�8ko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�7k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�6k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �5k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\�4}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff�- Roll in CentOS Brandingy�3i� �Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM�@- Rebuild because of bind ABI changes related to CVE-2023-50387T�2o=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�1k=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696 m |��R�w � m � �@k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��?k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\�>}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff�- Roll in CentOS Brandingy�=i� �Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM�@- Rebuild because of bind ABI changes related to CVE-2023-50387T�<o=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�;k=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�:k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �9k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects � � ��E � � \�H}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�Go=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�Fk=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�Ek� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �Dk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�Cko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�Bk� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�Ak��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib e �r+��V��: � � e D�a � 419a628252f2a83438fabbadf25cbc862ef23160a9a3d32fa110f61a1f1f3930D�` � 3989ac4ab63df7b51e1ce010e2b0d2368a33f915f06ae6b659dd6861d3dc3721D�_ � 49a6803a256d5206d45f93d9583e7333cd4961a731881b7a82c761bb7ea7c9abD�^ � 912ce11b5c1438a25af1e1961d891e6421717a57685de5add6d528d3ff3bdf42D�] � 1e0e7cf67ede91280fd5a1d1a63490ea597c590a44d12ba3e9d2c08a05b703c1D�\ � a9ba907298e679306020035cb1d25f9afc4e33153f8395fbcfb0ce1578791a93D�[ � bbf2b7054c85cc8831c0ffba64a4cabdc3eb23c4d32ba5484b962d4c8f22ecdeD�Z � 7b812c97766f36c2e477c31f7c5cfaabf34e7bfaf746d34a7f6971d6abc3e95cD�Y � 3b822a517d29541cd78da3a94ca8b9ce8095283d799bf7d7ebe96461744ae90dD�X � eac7d9685870a65836a4ca60f270d56cb0278fbdcef6be718d7aae558eeab78dD�W � a29e2e0a13cced40434f89b37fa93d3caf9d4d7726df5a200015fd9c03f045f6D�V � 5784610bb7a7b03cfd4ed995bd2f9d4785cdbc6dd40713274e6f1ae158558f20D�U � 4bfbeb71cf3639c4f6067ddf6c491f06976bc93d091646bb825481dd641a719f ; z�~ � � ; R�Pk=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�Ok� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �Nk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�Mko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�Lk� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�Kk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �Jk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��Ik��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events ` �J�N�b � ` {�Xk� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �Wk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�Vko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�Uk� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�Tk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �Sk��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\�R}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�Qo=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217 � �T�y�} � � k�`ko�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�_k� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�^k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �]k��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase\�\}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff�- Roll in CentOS Brandingy�[i� �Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM�@- Rebuild because of bind ABI changes related to CVE-2023-50387T�Zo=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�Yk=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696 � |��R�w � c�hUu�Tim Waugh <twaugh@redhat.com> 3.2-11P�{@- Ported i18n patch and reinstated it (bug #870460).]�gUi�Tim Waugh <twaugh@redhat.com> 3.2-10PY��- Fixed license as current source says GPLv3+.\�f}?�CentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.2ff�- Roll in CentOS Brandingy�ei� �Stepan Broz <sbroz@redhat.com> - 12:4.2.5-83.2fM�@- Rebuild because of bind ABI changes related to CVE-2023-50387T�do=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�ck=�Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�bk� �Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �ak��Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects C g�Q�Y � C c�rUu�Tim Waugh <twaugh@redhat.com> 3.2-11P�{@- Ported i18n patch and reinstated it (bug #870460).]�qUi�Tim Waugh <twaugh@redhat.com> 3.2-10PY��- Fixed license as current source says GPLv3+.M�pQM�Than Ngo <than@redhat.com> - 3.3-6c��@- Resolves: #2152980, regression[�oQi�Than Ngo <than@redhat.com> - 3.3-5[�H�- Resolves: #1611281, diff -y produces garbageJ�nY?�Daniel Mach <dmach@redhat.com> - 3.3-4R�U�- Mass rebuild 2014-01-24J�mY?�Daniel Mach <dmach@redhat.com> - 3.3-3R�k�- Mass rebuild 2013-12-27k�lS��Tim Waugh <twaugh@redhat.com> 3.3-2Rg�@- Fixed multibyte handling logic for diff -Z (bug #1022417).B�kS5�Tim Waugh <twaugh@redhat.com> 3.3-1QQ��- 3.3 (bug #927560).`�jUo�Tim Waugh <twaugh@redhat.com> 3.2-13Q']�- Fixed i18n handling of 'diff -E' (bug #914666).��i���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2-12Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild 1 g�Q�Y � 1 e�|Yu�Petr Oros <poros@redhat.com> - 1:3.0-3X!�@- Hide irrelevant fixup message - Resolves: #1384195m�{Y��Petr Oros <poros@redhat.com> - 1:3.0-2Ws�@- Unmask LRDIMM in memmory type detail - Resolves: #1321342M�zQM�Than Ngo <than@redhat.com> - 3.3-6c��@- Resolves: #2152980, regression[�yQi�Than Ngo <than@redhat.com> - 3.3-5[�H�- Resolves: #1611281, diff -y produces garbageJ�xY?�Daniel Mach <dmach@redhat.com> - 3.3-4R�U�- Mass rebuild 2014-01-24J�wY?�Daniel Mach <dmach@redhat.com> - 3.3-3R�k�- Mass rebuild 2013-12-27k�vS��Tim Waugh <twaugh@redhat.com> 3.3-2Rg�@- Fixed multibyte handling logic for diff -Z (bug #1022417).B�uS5�Tim Waugh <twaugh@redhat.com> 3.3-1QQ��- 3.3 (bug #927560).`�tUo�Tim Waugh <twaugh@redhat.com> 3.2-13Q']�- Fixed i18n handling of 'diff -E' (bug #914666).��s���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2-12Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild q �.�^� q ��c�M�Lianbo Jiang <lijiang@redhat.com> - 1:3.2-5^��@- Revert this patch("Use larger units for memory device and BIOS size") - Resolves: rhbz#1767323�<�c��Lianbo Jiang <lijiang@redhat.com> - 1:3.2-4^r @- Fix System Slot Information for PCIe SSD - Resolves: rhbz#1793900 - Sync with upstream(commit:62bce59fed1) - Resolves: rhbz#1767323��c�;�Lianbo Jiang <lijiang@redhat.com> - 1:3.2-3\��- Add "Logical non-volatile device" to the memory device types - Resolves: rhbz#1664921g� co�Lianbo Jiang <lijiang@redhat.com> - 1:3.2-1[�@- Sync with upstream 3.2 - Resolves: rhbz#1628992c�cg�Lianbo Jiang <lijiang@redhat.com> - 1:3.1-1Z�@- Sync with upstream - Resolves: rhbz#1568227r�~Y� �Petr Oros <poros@redhat.com> - 1:3.0-5Y �@- Update compiler flags for hardened builds - Resolves: #1420763Z�}Y_�Petr Oros <poros@redhat.com> - 1:3.0-4X�f@- Sync with upstream - Resolves: #1385884 O o���0 � O s� g��Petr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h� gm�Petr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e� gg�Petr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�g��Petr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569)o�g{�Petr Menšík <pemensik@redhat.com> - 2.76-10] ��- Fix TCP queries after interface recreation (#1721668)i�eq�Petr Menšík <pemensik@redhat.com> - 2.79-9\�@- Fix passing of dnssec enabled queries (#1638703)t�e��Petr Menšík <pemensik@redhat.com> - 2.76-8\��@- Stop using privileged port for outbound queries (#1614331)� �g�5�Lianbo Jiang <lijiang@redhat.com> - 1:3.2-5.1_��@- Fix the "OUT OF SPEC" error for empty NVMe and DIMM slots - Resolves: rhbz#1858345 v �{ � e�gg�Petr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�g��Petr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569)o�g{�Petr Menšík <pemensik@redhat.com> - 2.76-10] ��- Fix TCP queries after interface recreation (#1721668)i�eq�Petr Menšík <pemensik@redhat.com> - 2.79-9\�@- Fix passing of dnssec enabled queries (#1638703)�!�k�Y�Petr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementationg� gk�Petr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)�� g�'�Petr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610) � � �+ � }�k��Petr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)�!�k�Y�Petr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementationg�gk�Petr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)��g�'�Petr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s�g��Petr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h�gm�Petr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247) ~�5�A �!� k�Y�Petr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementationg� gk�Petr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)�� g�'�Petr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s� g��Petr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h�gm�Petr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e�gg�Petr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�g��Petr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569) V �� �@ � V e�'gg�Petr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�&g��Petr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569)o�%g{�Petr Menšík <pemensik@redhat.com> - 2.76-10] ��- Fix TCP queries after interface recreation (#1721668)i�$eq�Petr Menšík <pemensik@redhat.com> - 2.79-9\�@- Fix passing of dnssec enabled queries (#1638703)t�#e��Petr Menšík <pemensik@redhat.com> - 2.76-8\��@- Stop using privileged port for outbound queries (#1614331)n�"ku�Petr Menšík <pemensik@redhat.com> - 2.76-17.3`B @- Accept replies from bound sockets again (#1923913)w�!k��Petr Menšík <pemensik@redhat.com> - 2.76-17.2`<�@- Correct two regressions introduced by CVE fixes (#1923913)}� k��Petr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649) ( � �+ � ( o�.g{�Petr Menšík <pemensik@redhat.com> - 2.76-10] ��- Fix TCP queries after interface recreation (#1721668)i�-eq�Petr Menšík <pemensik@redhat.com> - 2.79-9\�@- Fix passing of dnssec enabled queries (#1638703)�!�,k�Y�Petr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementationg�+gk�Petr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)��*g�'�Petr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s�)g��Petr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h�(gm�Petr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247) ~�5�A �!�5k�Y�Petr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementationg�4gk�Petr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)��3g�'�Petr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s�2g��Petr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h�1gm�Petr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e�0gg�Petr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�/g��Petr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569) � ���+�+ � g�<gk�Petr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)��;g�'�Petr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s�:g��Petr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h�9gm�Petr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e�8gg�Petr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�7g��Petr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569)}�6k��Petr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649) X �[�p � X � �B�'��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.12-0.29.pre5P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildt�Am�Kamil Dudka <kdudka@redhat.com> - 0.12-0.28.pre5OY�- do not crash if add_heartbeat() returned NULL (#798103)n�@ku�Petr Menšík <pemensik@redhat.com> - 2.76-17.3`B @- Accept replies from bound sockets again (#1923913)w�?k��Petr Menšík <pemensik@redhat.com> - 2.76-17.2`<�@- Correct two regressions introduced by CVE fixes (#1923913)}�>k��Petr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)�!�=k�Y�Petr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementation { ����' � { S�Ik?�Daniel Mach <dmach@redhat.com> - 0.12-0.36.pre6R�U�- Mass rebuild 2014-01-24S�Hk?�Daniel Mach <dmach@redhat.com> - 0.12-0.35.pre6R�k�- Mass rebuild 2013-12-27�A�Gm��Kamil Dudka <kdudka@redhat.com> - 0.12-0.34.pre6Q+R@- update to latest upstream pre-release - drop unneeded patches - fix autoconf warnings - explicitly disable using OpenSSL and GnuTLS� �F�'��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.12-0.33.pre5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildo�Emu�Kamil Dudka <kdudka@redhat.com> - 0.12-0.32.pre5P��@- do not delegate GSSAPI credentials (CVE-2012-4545)��Dm� �Kamil Dudka <kdudka@redhat.com> - 0.12-0.31.pre5Pr�@- add default "ddg" dumb/smart rewrite prefixes for DuckDuckGo (#856348)v�Cm��Kamil Dudka <kdudka@redhat.com> - 0.12-0.30.pre5P<��- fix specfile issues reported by the fedora-review script � � ��� � l�Pkq�Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��Ok��Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i�Neq�Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��Me�;�Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033��Le�=�Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s�Ke��Petr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033h�Jmg�Kamil Dudka <kdudka@redhat.com> - 0.12-0.37.pre6Y��- Rebuilt for js 48-bit VA support (#1439479) e �r+��V��: � � e D�n � 7174a32cc247b70e650aa36730fa976b5d7e498a9fc59fde5c06de3be20d8da3D�m � e9ee7e077912afbee46d9de1440f905a3150a783ca98d2999145e7f0d4946b00D�l � cdc630a6947d25b54a576be1d51170f8ca7a920b446adaa54aece61b239e798dD�k � 91fc50b78a1f5d50c4f2a592996c690be37c4d7e9724a2dbd625eba57e9d607bD�j � 2847971791401757255fc2092497c37efa1f8f7440c3ce7fc60b243b497e8094D�i � 69714123fc4f27b58c1e15a2bdfef799961c0c2c3f1398116a458d05cf87f618D�h � 2d55f68e1a5fb1da8eb138aca00951f0f028a8f3db6a4427488b57f1c043891eD�g � 67dc839e667e3f5b861596b011039393d6a243f7dfb880c5c787ed72ab1e601fD�f � 72415fc89f5dcb558370bd92e670638fc9add9ad19ba4ee77ef546520c9a9e39D�e � f2136014ff193c8527ea2351651b413e5c8cb5eeb1687c98dd2e6d544c6813bdD�d � 81d6abea697da32a4834b6bbe7be764845468cc2ee8e089861fd0eb80c2466c6D�c � a547520b96904888041cdae1529c93057c845c1215a8ac1a453c516eae9263a6D�b � decf2a313c4d562a043eed4b9202d10b5c58750490b4d6db6e70c5a2bf2fe794 � �/�< � ��Ve�=�Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s�Ue��Petr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033z�Tk� �Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a�Scc�Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�Rk��Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�Qk�i�Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643) < m| � < a�]cc�Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�\k��Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�[k�i�Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�Zkq�Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��Yk��Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i�Xeq�Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��We�;�Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033 � � y�z � � l�dkq�Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��ck��Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i�beq�Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��ae�;�Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033��`e�=�Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s�_e��Petr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033z�^k� �Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177) � �/�< � ��je�=�Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s�ie��Petr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033z�hk� �Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a�gcc�Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�fk��Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�ek�i�Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643) < m| � < a�qcc�Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�pk��Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�ok�i�Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�nkq�Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��mk��Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i�leq�Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��ke�;�Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033 � �� � �5�tq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�sq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081z�rk� �Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177) u �T� u ��xi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�wq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �vi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��ui�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��|{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�{k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��zu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�yu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��~i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�}q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��G ��H ��K ��P ��X ��` ��h ��p ��x �� �� �� �� �� ��( ��0 ��8 ��@ ��H ��P ��X ��` ��h ��r ��| �� �� �� �� �� ��' ��. ��5 ��< ��B ��I ��P ��V ��] ��d ��j ��q ��t ��x ��| �� �� �� �� �� �� �� �� ��& ��- ��4 ��; ��C ��K ��R ��Y ��a ºi úp ĺw ź ƻ ǻ Ȼ ɻ ʻ" ˻* ̻1 ͻ8 λ> ϻC лI ѻP ӻV Ի] ջd ֻj q ػx ٻ~ ڻ ۼ ܼ ݼ � � � � �" �& �' �- �0 �1 �8 �9 �: �@ �C �D �J �N �O �U -!l � �:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u �� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� � i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.�� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 b {�z�S � b �� k��Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i� eq�Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033�� e�;�Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033�� e�=�Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s�e��Petr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033��s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 9 ��$�C � 9 ��&e�=�Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s�%e��Petr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033z�$k� �Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a�#cc�Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�"k��Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�!k�i�Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l� kq�Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451) < m| � < a�-cc�Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�,k��Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�+k�i�Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�*kq�Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��)k��Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i�(eq�Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��'e�;�Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033 � ��Q�H � }�4]� �Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�3]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�2]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��1]�1�Milan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�0]� �Milan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�/]��Milan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495z�.k� �Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177) ^ | �g � ^ ��;]�1�Milan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�:]� �Milan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�9]��Milan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�8a� �Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�7]�Milan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�6]��Milan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �5]�%�Milan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail) �9�5�J � �/�C]��Milan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�Ba� �Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�A]�Milan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�@]��Milan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �?]�%�Milan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�>]� �Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�=]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�<]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream) A ��x0�, � A l�K]�Milan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�J]��Milan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �I]�%�Milan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�H]� �Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�G]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�F]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��E]�1�Milan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�D]� �Milan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream) � ��W�N � }�R]� �Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�Q]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�P]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��O]�1�Milan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�N]� �Milan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�M]��Milan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�La� �Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change) e �r+��V��: � � e D�{ � 4402a7fcf865ee506196d91c722ec2875470f134b63f3912ac69561ba10e5113D�z � 18defd29c31366e3f3fc7602eed4307dcdd1028a8e25fd6823379fa2ef33eb6bD�y � d219bddd9ca9b61182ef38132b073da37b5c7b6727fe9ef79c35acfe7e1aca0eD�x � a52fbf59e2e7f8b7b912ee6fd5be7c84450b3ab1d4cb68690cfc3f306086b817D�w � a919c9e3a766f98e15edfc8dde8b699f46753980aaf8f4b46d2831fcc01cf9b7D�v � 369ac51f105f8b0b9fb343deb57c8ed97f3e08bbb535d683866ddfd47b058675D�u � 1b57cc987d64b98efbaa6f796a3df838d4f4cc4a2b892e4e19685ea37ea8188dD�t � 284e903527e4376ba342697bff7afdcf76804823b3344908e0ad3589efb08d0eD�s � a56dd9d75f85b76dd72f232aef6262710e4f66d7291c55f0e3467fa4c70855eeD�r � 006866668980a661dabcff054750dcfabee9be838cbdbe8f6554a12c8d2437e4D�q � 1d2c5ccf5a54793d996b971ad4448b1d95a72bf1270703b1cdd944b0b4a82932D�p � 98fa7e7c32572003a415282278a680123f7896108aa35e2ddad608cf9a8bf1b6D�o � d057cb97f19e0b7a6e8769b9407b59d09edac0f8548ba4137a65575461013ea6 ^ | �g � ^ ��Y]�1�Milan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�X]� �Milan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�W]��Milan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�Va� �Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�U]�Milan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�T]��Milan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �S]�%�Milan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail) �9�5�J � �/�a]��Milan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�`a� �Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�_]�Milan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�^]��Milan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �]]�%�Milan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�\]� �Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�[]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�Z]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream) A ��x0�, � A l�i]�Milan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�h]��Milan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �g]�%�Milan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�f]� �Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�e]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�d]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��c]�1�Milan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�b]� �Milan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream) � ��W�N � }�p]� �Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�o]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�n]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��m]�1�Milan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�l]� �Milan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�k]��Milan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�ja� �Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change) ^ | �g � ^ ��w]�1�Milan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�v]� �Milan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�u]��Milan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�ta� �Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�s]�Milan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�r]��Milan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �q]�%�Milan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail) �9�5�J � �/�]��Milan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�~a� �Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�}]�Milan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�|]��Milan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �{]�%�Milan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�z]� �Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�y]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�x]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream) A ��x0�, � A l�]�Milan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�]��Milan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �]�%�Milan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�]� �Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��]�1�Milan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|� ]� �Milan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream) @ ��y1� @ �X�]�U�Milan Crha <mcrha@redhat.com> - 3.28.5-4]��@- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels) - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)�� ]�5�Milan Crha <mcrha@redhat.com> - 3.28.5-3]S��- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)�� ]�/�Milan Crha <mcrha@redhat.com> - 3.28.5-2[�v�- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)E� ]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|� ]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796297 (fixed upstream)� � ]�?�Milan Crha <mcrha@redhat.com> - 3.28.3-2[0�@- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)t�a� �Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change) � f�[�I � � E�]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796297 (fixed upstream)� �]�?�Milan Crha <mcrha@redhat.com> - 3.28.3-2[0�@- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)~�]�!�Milan Crha <mcrha@redhat.com> - 3.28.5-8_� �- Resolves: #1891558 (Birthday date of Contact depends on system timezone)}�]� �Milan Crha <mcrha@redhat.com> - 3.28.5-7_��- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)��]�3�Milan Crha <mcrha@redhat.com> - 3.28.5-6^�U@- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)��]�Q�Milan Crha <mcrha@redhat.com> - 3.28.5-5]�)�- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer) j w�u � j }�]� �Milan Crha <mcrha@redhat.com> - 3.28.5-7_��- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)��]�3�Milan Crha <mcrha@redhat.com> - 3.28.5-6^�U@- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)��]�Q�Milan Crha <mcrha@redhat.com> - 3.28.5-5]�)�- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)�X�]�U�Milan Crha <mcrha@redhat.com> - 3.28.5-4]��@- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels) - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)��]�5�Milan Crha <mcrha@redhat.com> - 3.28.5-3]S��- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)��]�/�Milan Crha <mcrha@redhat.com> - 3.28.5-2[�v�- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30) 6 �o'� 6 �X�"]�U�Milan Crha <mcrha@redhat.com> - 3.28.5-4]��@- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels) - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)��!]�5�Milan Crha <mcrha@redhat.com> - 3.28.5-3]S��- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)�� ]�/�Milan Crha <mcrha@redhat.com> - 3.28.5-2[�v�- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)E� ]1�Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|� ]� �Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796297 (fixed upstream)� � ]�?�Milan Crha <mcrha@redhat.com> - 3.28.3-2[0�@- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)~� ]�!�Milan Crha <mcrha@redhat.com> - 3.28.5-8_� �- Resolves: #1891558 (Birthday date of Contact depends on system timezone) f�[�x# z W�*eM�Josef Ridky <jridky@redhat.com> - 0:1.8.18-4X�+�- Fix RPMDiff issues and rebuild�%�)e�g�Josef Ridky <jridky@redhat.com> - 0:1.8.18-3X��@- Fix issues with warning: dereferencing type-punned pointer will break strict-aliasing rules from RPMDiffR�(eC�Josef Ridky <jridky@redhat.com> - 0:1.8.18-2X���- Fix issue in file sources_�'e]�Josef Ridky <jridky@redhat.com> - 0:1.8.18-1X� @- New upstream release 1.8.18 (#1398658)~�&]�!�Milan Crha <mcrha@redhat.com> - 3.28.5-8_� �- Resolves: #1891558 (Birthday date of Contact depends on system timezone)}�%]� �Milan Crha <mcrha@redhat.com> - 3.28.5-7_��- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)��$]�3�Milan Crha <mcrha@redhat.com> - 3.28.5-6^�U@- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)��#]�Q�Milan Crha <mcrha@redhat.com> - 3.28.5-5]�)�- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer) D ���'� � D R�1eC�Josef Ridky <jridky@redhat.com> - 0:1.8.18-2X���- Fix issue in file sources� �0k�S�Pavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a�{�- Protect against negative values to memmove that caused "ipmitool sol activate" to crash against an IBM DataPower appliance (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519) Cherry-picked from upstream PR#78.i�/sc�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_�@- Disable -fstrict-aliasing (RPMDiff issue)^�.sM�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F�- Backport fix for CVE-2020-5208o�-e}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy��- Remove debug prints shown without -v option (#1483163)��,e�=�Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y�{�- Hide unrequested verbose output (#1483163) - Fix doc for check input values (#1495098)o�+e}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-5X�s�- Remove RPMDiff fix file (#1439269) related to #1398658 � W����$ � i�8sc�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_�@- Disable -fstrict-aliasing (RPMDiff issue)^�7sM�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F�- Backport fix for CVE-2020-5208o�6e}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy��- Remove debug prints shown without -v option (#1483163)��5e�=�Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y�{�- Hide unrequested verbose output (#1483163) - Fix doc for check input values (#1495098)o�4e}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-5X�s�- Remove RPMDiff fix file (#1439269) related to #1398658W�3eM�Josef Ridky <jridky@redhat.com> - 0:1.8.18-4X�+�- Fix RPMDiff issues and rebuild�%�2e�g�Josef Ridky <jridky@redhat.com> - 0:1.8.18-3X��@- Fix issues with warning: dereferencing type-punned pointer will break strict-aliasing rules from RPMDiff O ��J � � O \�>a[�Jan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�=[?�Daniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24K�<[?�Daniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��;���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�w�:g� �Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-11d��- Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569� �9k�S�Pavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a�{�- Protect against negative values to memmove that caused "ipmitool sol activate" to crash against an IBM DataPower appliance (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519) Cherry-picked from upstream PR#78. � �K � ��Ce�G�Jan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695b�Bec�Jan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�AeW�Jan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�@a��Jan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410�y�?a��Jan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232 � Z�s%� � �y�Ia��Jan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232\�Ha[�Jan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�G[?�Daniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24K�F[?�Daniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��E���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�De�a�Jan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352 " �H� p " K�P[?�Daniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��O���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�Ne�a�Jan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352��Me�G�Jan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695b�Lec�Jan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�KeW�Jan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�Ja��Jan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410 e �r+��V��: � � e D� � a962654ff0fe134fdd88392c47a711e94bc84e08e27d0a7cb7d28e9150d2999aD� � 45f0406fbbb55abe1511ceade8ca9fb297ae44cce197166c9a3f70561dbffc30D� � 8246ba658ab0a84cdf2b467c142701ec560b9ced3db90dfd04a7275cb2636566D� � 301d479dffc9084746269cad6d9be379a3c01fafa139c9203aa5c98ca7e9d79eD� � f4c0956c54c55adea5769904bb460f6ab64b017d31e9a73f0a047345be6dd6afD� � 6cc655263da0213df7eb5a2c6c63b5825361f55336855a67a7b33881d10ca955D� � fc2d6ed7481cb42c62b4bd75126fc4237093c74ba7e87908a90815f672bdf45dD� � b0179562abc1ff5d40c03661749ce4f7f4c7d58c428cecfc4a3711bfa98e6ec6D� � c653aaa3759f6c65e6ccf1dafa36096bf4821f315dbf756943730947258100efD� � 54b72bac2daf97a8d1ba79e4288be55712b5b35027f2df547f3e0af93bd9b6a5D�~ � 037e885e4b00fa8c73772c5a2e0f05aa735f04807e080c5819a8a15dade3d5dcD�} � 73cda0f598ca90fe3470940ed62663a7a5a1091731757b8e057fc929d3c1a209D�| � 1a5b2d18101ca9a398c7873900403ed4ffc7daf7fb801a9ce1649c3fafe185cf � �SVb � b�Vec�Jan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�UeW�Jan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�Ta��Jan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410�y�Sa��Jan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232\�Ra[�Jan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�Q[?�Daniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24 0 g�(��- 0 �y�]a��Jan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232\�\a[�Jan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�[[?�Daniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24K�Z[?�Daniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��Y���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�Xe�a�Jan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352��We�G�Jan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695 " �H� p " K�d[?�Daniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��c���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�be�a�Jan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352��ae�G�Jan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695b�`ec�Jan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�_eW�Jan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�^a��Jan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410 � �SVb � b�jec�Jan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�ieW�Jan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�ha��Jan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410�y�ga��Jan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232\�fa[�Jan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�e[?�Daniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24 0 g�(��- 0 �y�qa��Jan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232\�pa[�Jan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�o[?�Daniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24K�n[?�Daniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��m���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�le�a�Jan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352��ke�G�Jan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695 �H� o S�x[O Joe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��w�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�ve�a�Jan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352��ue�G�Jan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695b�tec�Jan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�seW�Jan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�ra��Jan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410 � �b �Q� j�~]{ Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�}]U Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�|]] Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�{[U Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�z]? Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�y]? Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27 Z Z �"�e�a Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 W >�N � � W V�[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�]?Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�]?Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)����Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�>� e� Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �H� j�]{Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"� e�aTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 9 >��J � � 9 W�]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L� ]?Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L� ]?Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S� [OJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)�>� e�Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � � j�]{Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903 Z Z �"�e�aTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 _ >�V � _ V�[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�]?Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�]?Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��e�9Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�e�Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �H� j�]{Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"� e�aTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 >� � m L�"]?Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�!]?Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S� [OJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)�� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�� e�9Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>� e�Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �I�� j�&]{Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�%]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�$]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�#[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718 Z Z �"�'e�aTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 W >�N � � W V�-[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�,]?Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�+]?Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�*[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��)��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�>�(e�Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �H� j�0]{Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�/]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�.]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"�1e�aTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 9 >��J � � 9 W�8]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�7]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�6[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�5]?Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�4]?Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�3[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)�>�2e�Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � � j�9]{Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903 Z Z �"�:e�aTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 _ >�V � _ V�@[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�?]?Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�>]?Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�=[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��<e�9Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�;e�Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �H� j�C]{Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�B]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�A]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"�De�aTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 >� � m L�J]?Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�I]?Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�H[OJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��G��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild��Fe�9Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�Ee�Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �I�� j�N]{Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�M]UJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�L]]Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�K[UJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718 Z Z �"�Oe�aTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 W >�N � � W V�U[U Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�T]? Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�S]? Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�R[O Joe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��Q�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�>�Pe�Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 e �r+��V��: � � e D� � e4434d6372a44237428f390b21eaa263d38ebe585fcde7c9b6d093bd6a53f942D� � 55a15d25343aa48f6f67cbbb7365207f4430960b97fe22eea6521df9ef5f6e1eD� � 997876dc6dace25c6299e9ca1dc76b8112d4862b054ac67c11bcfa1e81c637efD� � 36e226643adb16e51005fd729514451221b0570727d946df70bc555084b1ab43D� � c59613f8305583361be758cf7921fe48cedfaca536f354535c5dca03087c3798D� � c102608096eb8bfc89f563c1a82e55812f85dc764c578fc98b29fe740b014b88D� � bb4a0d5f27950f8712ba44e0d94dac84d24f409c0064a28dd7e64dab38dea9bcD� � ad0cdb4681378d6768d0ba8ff62f05cf6459eb32070c81c7d3eec65c844a8fa5D� � 7202bdb3eb9b58bc979d8ec45159b6e39ea0ff80df19efb9cc6274a852beee11D� � 8552fe474d6c38b9a301d6273b81897005c2a518b97ad149df81dca168a8bdc6D� � 77a2ace1d206cdce59078a04e1d50602e60fa9783490a87d7d894bfb57c1904cD� � 38165265e6956a27cc026b542a5b84342b4e8d479263713e10c9a0b0871d9705D� � 46c46ba8573d8f101c53fe10179a66e853ec151d66f5dfb686fb60c5e75aa610 � �H� j�X]{ Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�W]U Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�V]] Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"�Ye�a Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 9 >��J � � 9 W�`]U Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�_]] Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�^[U Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�]]? Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�\]? Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�[[O Joe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)�>�Ze� Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � � j�a]{ Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903 Z Z �"�be�a Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 _ >�V � _ V�h[U Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�g]? Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�f]? Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�e[O Joe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��de�9 Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�ce� Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �H� j�k]{ Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�j]U Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�i]] Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"�le�a Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 Y >� Y �O�oq�/ Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784��ne�9 Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�me� Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 : u�#� � : �uq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�tq�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��sq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�rq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�qq�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��pq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818 E q4� E �L�zq�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��yq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��xu�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�wu� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �vq�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 ~�� � �q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�~q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�}q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��|q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�{q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205 ^ �/� � ^ �q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -|�u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 K v�� K �9� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 � l�o�c � �Y�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 ! ~�� � ! {�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 ��� � �q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189 9 �/�2 � 9 w� u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759|� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 F �"R � F ��%q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�$q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�#q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��"q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�!q�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784 A #� � A ��*u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�)u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �(q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�'q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�&q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 : u�#� � : �0q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�/q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��.q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�-q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�,q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��+q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818 Q q4�! Q �L�5q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -|�4u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��3u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�2u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �1q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 ~�� � �:q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�9q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�8q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��7q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�6q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205 & �/�2 � & ��@q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�?q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�>u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�=u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��<u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�;u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Eu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Du�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Cq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Bq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Aq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Kq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Jq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Iq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Hu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Gu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Fu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Qu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Pu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Ou�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Nu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Mu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Lq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Vq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Uq�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Tq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Sq�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Ru}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 e �r+��V��: � � e D�" � 457da3dc935ceedbf369f8d8283038086c61d7ec599b6b13c34f1a9eb692decdD�! � f2bf2828a9c0dfda573e370c7710e37259fb9041de3d51ef97b7cd65188789a9D� � 805b144f9365a51694ca9ecf28482dd714b37f78fa08e3a4a7a5aa22da4216deD� � 757772969a2b13e5983aef925c31b673696df5c322b359714f2a89267929bf4eD� � 0cd349e9faa4208c5a06dd623c32419cde907327603062ef0197ae238ecf9cb1D� � 815665d02d2dd24faf81af70e9152d3a62a47d616ae070372b69b3ce7b0c1e95D� � dbc118d3ccfcbb7b3059ad8a684e25485e0745d8f682f5b8e2a16c1ab4a3100bD� � 22ad74d75ec657ae1c2e0ef0ec2331caf9bbe77cd9d4af628f4350d8891164d0D� � 42e5dee7b0556011cb8bdc92961b584ecf210268b03c4e68df01ba36dc1f30e1D� � 0c50466e187899042f37e621ad418348afddcf8a0b1ef74a9c42573da5425ecaD� � 2c656f5e90d00ae998a2b2a6a9d7caaa9328030aefb87a1ce161d941af33182eD� � 314a81ff92e3f3500ef8c7b95dd418bbf2ed11ea8d65031d6e8de42e8e43ab73D� � 5ec01f00815a52d61439e813a4a0958fc52c9c59500edb2e2fabac3c7fe068c8 K v�� K �9�[u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Zq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Yq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Xq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Wq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�aq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��`q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�_q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�^q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��]q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��\u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�fu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��eu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�du�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �cq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�bq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �lq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�kq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�jq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��iq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�hq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�gq�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��rq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�qq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�pu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�ou�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��nu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�mu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��wu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�vu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �uq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�tq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�sq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �}q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�|q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��{q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�zu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�yu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�xu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �~q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � � q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��$q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�#q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�"u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�!u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��)u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�(u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �'q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�&q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�%q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �/q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�.q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��-q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�,u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�+u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�*u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�5u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�4u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�3u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��2u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�1u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �0q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �:q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�9q�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��8q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�7q�/ Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�6u} Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�?u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �>q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�=q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�<q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��;q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 of jflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��Y ��` ��a ��b ��h ��k ��l ��o ��u ��z � � � � � � � �% �* �0 �5 �: �@ �E �K �Q �V �[ �a �f �l �r �w �} � � � � � � �$ �) !�/ "�5 #�: $�? &�E '�J (�P )�V +�[ ,�a -�g .�l /�q 0�w 1�| 2� 3� 4� 5� 6� 7� 8�# 9�) :�. ;�4 <�: =�? >�E ?�K @�P A�U B�[ D�` E�f F�l G�q H�w I�} J� K� L� M� N� O� P�# Q�) R�/ S�4 T�9 U�? V�D W�J X�P Y�U Z�[ \�a ]�f ^�k _�q `�v a�| b� c� d� e� f� g� h�# i�( ( l�� ( �Y�Eq�C!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Dq� !Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Cq�!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Bq�)!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Aq� !Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��@u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Ju�!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Iu�-!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Hu�!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Gq�'!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Fq�!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Pq�'"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Oq�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Nq�C"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Mq� "Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Lq�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Kq�)"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Vq� #Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Uq�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Tu�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Su�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Ru�-"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Qu�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 e �r+��V��: � � e D�/ � c7b50fc58609f6e4057703fe1bb83fe6a7c2c9ca068b534e97ac8c7a78e4c8f4D�. � 6bca052cf755c10a9a15dd05c1eba4a527bd36e88354bfc05d9a678661d7d827D�- � 4bec36ddbf5963ce6aa8fffba7900ae727da0978060620165937170bee608f51D�, � e899e4be36103040ff23d743f3f3ec0eaf8bddfc2604aee19b9ab12e587d87e8D�+ � f4df6c727e6e445ddca7fe286fc32ec9aed6c8a3fddf42faf905580926d1117aD�* � e0a4a368252a2466ddc2b35c58646282829e8b14ff12d3237645aab8609ca5c2D�) � 5f5c399567e8888b62c997c08412e019f0c5ddf8dd28c78cfa0128928dcd853eD�( � 662a9d17ec8e137ca36a020dc0efbe8ae088dfd2e1dab2436cf4496bf31f3c75D�' � b6ff39e8375e47ff8d8c06f442a8b78add02677aa81e66db47255f6469357012D�& � 293f6c4af159003426f1ce9255f1bc981d24fe6d1e848489c5b960eb8d9b7e85D�% � e31ccbd3696503d01bf17eb08d66c852a75d233ea3040b15ee14477f72f2013dD�$ � 84534b4e8a9f57e1d6cedeafa786721a479e210dc0b2bc07dd005e62c961e69eD�# � 575a71de43d9ee448ec1678d6e6396b7c3cc5de05454e3681e5a3f900c5dc4bc A #� � A ��[u�-#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Zu�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Yq�'#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Xq�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Wq�C#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �aq�$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�`q�C$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��_q� $Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�^u�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�]u�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�\u�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�gu�$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�fu�$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�eu�$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��du�-$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�cu�$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �bq�'$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �lq�%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�kq�)%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��jq� %Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�iq�/%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�hu}$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�qu�%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �pq�'%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�oq�%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�nq�C%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��mq� %Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�wq�C&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��vq� &Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�uq�&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�tq�)&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��sq� &Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��ru�-%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�|u�&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��{u�-&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�zu�&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �yq�'&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�xq�&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�''Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� 'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�~q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�}q�)'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� (Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A �� u�-(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� )Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�')Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V � q�*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� *Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u})Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�#u�*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �"q�'*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�!q�*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� *Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�)q�C+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��(q� +Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�'q�+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�&q�)+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��%q� +Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��$u�-*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�.u�+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��-u�-+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�,u�+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �+q�'+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�*q�+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �4q�',Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�3q�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�2q�C,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��1q� ,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�0q�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�/q�),Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��:q� -Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�9q�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�8u�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�7u�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��6u�-,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�5u�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��?u�--Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�>u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �=q�'-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�<q�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�;q�C-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Eq�.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Dq�C.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Cq� .Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Bu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Au�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�@u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Ku�.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Ju�.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Iu�.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Hu�-.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Gu�.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Fq�'.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Pq�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Oq�)/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Nq� /Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Mq�//Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Lu}.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Uu�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Tq�'/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Sq�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Rq�C/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Qq� /Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�[q�C0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Zq� 0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Yq�0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Xq�)0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Wq� 0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Vu�-/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 e �r+��V��: � � e D�< � 9f8abcf48b89d3171a189ec5449a97b802ba649f300ad32218c8310d9ae89caaD�; � 63037d9ff075fdac3127a74533eb74eaba6a3dd7a6b714768f44507fd8962d88D�: � e03fb473c4111b34ab231b026b46e185aba267a54abad312d1fc4be2fe1a79baD�9 � ddf36ad1ce4578114e5a65661c1a8de7696ede0b51d5d3a2d8ac551164a4d7ccD�8 � 4bdf983ae009a8ef897188d860d0535c00a5071923c33261e644570fa2d5cb9dD�7 � 7b0c0a663c4992773363ce6c177e9d75ad05e8f8ee19c76a4d1f71fdd6a97da0D�6 � a4e1b36b41fc592139af224d55fdf5ffecd2f6b528dd8ae73388911df76a9f02D�5 � f646388701bda1badf96a2fb3864cff8cec8c983277a87af8b050a51147a03afD�4 � bf7e4ecac92c09b957b31c3b99fe5124cb6807feecce32ee6137fa893ce3daecD�3 � 056e7fe3c5a00be53248709c74120df1d6c073ef1b7b7beba63ff41d48f35c17D�2 � 0c17cb1415294598f297a58396280f055f0f3258f080b1ab697bfe04bbe0008dD�1 � 4d77c6049313415fe1c4aab3e4ee43727167a46b87e28723f6c79f4bffef3607D�0 � e2a3860deceb4f2f2ddc8390def1eb021196fee5ef075702ec1588374818efa6 � ~�� � |�`u�0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��_u�-0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�^u�0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �]q�'0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�\q�0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �fq�'1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�eq�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�dq�C1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��cq� 1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�bq�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�aq�)1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��lq� 2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�kq�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�ju�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�iu�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��hu�-1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�gu�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��qu�-2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�pu�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �oq�'2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�nq�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�mq�C2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �wq�3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�vq�C3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��uq� 3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�tu�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�su�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�ru�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�}u�3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�|u�3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�{u�3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��zu�-3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�yu�3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �xq�'3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q�4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� 4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�~u}3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u�4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� 4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y� q�C5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� 5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q�5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� 5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u�5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� 6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & �� q� 7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{� u�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��#u�-7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�"u�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �!q�'7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �)q�8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�(q�C8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��'q� 8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�&u�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�%u�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�$u�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�/u�8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�.u�8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�-u�8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��,u�-8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�+u�8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �*q�'8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �4q�9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�3q�)9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��2q� 9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�1q�/9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�0u}8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�9u�9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �8q�'9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�7q�9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�6q�C9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��5q� 9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�?q�C:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��>q� :Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�=q�:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�<q�):Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��;q� :Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��:u�-9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Du�:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Cu�-:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Bu�:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Aq�':Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�@q�:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Jq�';Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Iq�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Hq�C;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Gq� ;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Fq�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Eq�);Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Pq� <Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Oq�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Nu�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Mu�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Lu�-;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ku�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Uu�-<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Tu�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Sq�'<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Rq�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Qq�C<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �[q�=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Zq�C=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Yq� =Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Xu�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Wu�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Vu�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 e �r+��V��: � � e D�I � ed6e07b307de61a56b4041aaba7661b6fcdeb599402390671b3db4d8c0b4cdfcD�H � 8f01b6b2a6ce4e4129d3b25510ee332c113e0f671df54f56ad2dff8e711a11b8D�G � eb7bebdbd517434195d041324099366ce234dfd58929430224320ff59b866c8eD�F � 864bee28e84214e17a2569dc4782fe389e64424fc470fc80157b86f2bdf0df03D�E � 2ebe4dd6652fe19a01c6576bd236175a5952205b51f6f3c76a25a539af114ca1D�D � e818d4e04d72d3014d26343beb92384fad7a4c394dde4f7dc2a541d0416f569fD�C � 132ce82de39a18ad1be89af9ce56bdf2cf2471eddae86a469dfbdaef42478652D�B � 55db8fa1e758d5038aa9f74ed8982f1b73505b989a9643ef81f8b704f975fb8cD�A � 2eb32fa5c1642715eed3bff00d204b72790f716770349e1a3307229ec9f1a88aD�@ � 4badd67c65c46b09cdfb999c67dcf07efbec0e2b1b5ee21318fb415d90aff27eD�? � 1b7c83c31498a1d9eec34b76e89035fa039c4d34cdfb507851df956c9a5cb86bD�> � 8901005d391fcf6247d95caeaae9763898d0d5a0e8da308e73380bbdefdbbb1cD�= � 90b4df9d1f42ba4c9d6ed5a171805bd3aa1ab73ca030c78d62b088ffd716ff81 $ q4�! � $ |�au�=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�`u�=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�_u�=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��^u�-=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�]u�=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �\q�'=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �fq�>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�eq�)>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��dq� >Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�cq�/>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�bu}=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�ku�>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �jq�'>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�iq�>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�hq�C>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��gq� >Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�qq�C?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��pq� ?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�oq�?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�nq�)?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��mq� ?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��lu�->Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�vu�?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��uu�-?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�tu�?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �sq�'?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�rq�?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �|q�'@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�{q�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�zq�C@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��yq� @Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�xq�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�wq�)@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{� u�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��~u�-@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�}u�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�CAOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � � q�BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�CBOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|� u�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u�BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9� u�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�CCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�#q�CDOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��"q� DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�!q�DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�� u�-COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�(u�DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��'u�-DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�&u�DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �%q�'DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�$q�DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �.q�'EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�-q�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�,q�CEOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��+q� EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�*q�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�)q�)EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��4q� FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�3q�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�2u�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�1u�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��0u�-EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�/u�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��9u�-FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�8u�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �7q�'FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�6q�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�5q�CFOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �?q�GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�>q�CGOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��=q� GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�<u�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�;u�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�:u�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Eu�GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Du�GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Cu�GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Bu�-GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Au�GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �@q�'GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Jq�HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Iq�)HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Hq� HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Gq�/HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Fu}GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Ou�HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Nq�'HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Mq�HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Lq�CHOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Kq� HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Uq�CIOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Tq� IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Sq�IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Rq�)IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Qq� IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Pu�-HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Zu�IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Yu�-IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Xu�IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Wq�'IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Vq�IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 e �r+��V��: � � e D�V � 147dc35e6fff3dff6a81de8b9ddae7411d557a2f80bb93a6b4040fde544b5c73D�U � 0c0ba36a5e8704ab304024f5f4bc9616e4592da8ef6293f27ee584cd13805973D�T � 176d124a27956ac315b44b6b42bb13fe2fa7702d805ae7b58731b8d634bc0a2eD�S � 34210a0ec25b1987cb28b7719bb7ab7d7eff1adb56711dc0f4835ba89256cc82D�R � bf1f40d6279d065b649f886d586e1bc6bb518de89df420459f9ba36c8a3f403aD�Q � 129f6f9ff00bcf11fa14cab3ec12d80bf9b9612f1194adc7aaacead1b3e7b651D�P � 4935d172a32f8bef9fd07236702a965e4d14a6e86b534e6c52fbe4aad6047e03D�O � 87fc214b49a5aba9c5d113e739d9654287b4a0272123ff8eead1a12b7c845ec3D�N � 4e0fff288896ea81f4c997cb6ce0c357c6515c6987555c53ddbd8c800177f083D�M � a8c33d4ab95933b150aa784ba9bae1d03d59e6633afd229fc51bafff1df0e892D�L � e36b9d803bc4c2cac122e737759eaaf8944848895c016d80232d05a405a97587D�K � e7be65394477619c3bc276a472efa4a7f642dce66c5dee203826d0391223391aD�J � 5d10762096ebcbd7efdc8eecb2d15ca2b35d49c6fbf417a3f85b555ac622eafc 6 0�$G � 6 � �`q�'JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�_q�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�^q�CJOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��]q� JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�\q�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�[q�)JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��fq� KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�eq�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�du�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�cu�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��bu�-JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�au�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��ku�-KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ju�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �iq�'KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�hq�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�gq�CKOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �qq�LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�pq�CLOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��oq� LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�nu�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�mu�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�lu�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�wu�LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�vu�LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�uu�LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��tu�-LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�su�LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �rq�'LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �|q�MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�{q�)MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��zq� MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�yq�/MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�xu}LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u�MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�~q�CMOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��}q� MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�CNOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |� u�NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�COOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A �� u�-POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�CPOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �#q�QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�"q�CQOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��!q� QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|� u�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�)u�QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�(u�QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�'u�QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��&u�-QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�%u�QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �$q�'QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �.q�ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�-q�)ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��,q� ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�+q�/ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�*u}QOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�3u�ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �2q�'ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�1q�ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�0q�CROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��/q� ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�9q�CSOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��8q� SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�7q�SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�6q�)SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��5q� SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��4u�-ROyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�>u�SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��=u�-SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�<u�SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �;q�'SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�:q�SOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Dq�'TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Cq�TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Bq�CTOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Aq� TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�@q�TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�?q�)TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Jq� UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Iq�UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Hu�TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Gu�TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Fu�-TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Eu�TOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Ou�-UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Nu�UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Mq�'UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Lq�UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Kq�CUOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Uq�VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Tq�CVOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Sq� VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Ru�UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Qu�UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Pu�UOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�[u�VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Zu�VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Yu�VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Xu�-VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Wu�VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Vq�'VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �`q�WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�_q�)WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��^q� WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�]q�/WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�\u}VOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 e �r+��V��: � � e D�c � 31dbae1dc23e561a169170b6a4e76e5abb65227590e305195a2a4c4709cc4a0dD�b � 6fc93f49bcfb356742bd0f053b32fc44739f52e356d8575874ed5e03d9fd09baD�a � 7d006c10e1e850ab6583783df33de8d968fa27fd47068c159bb2bac55c7eeecaD�` � 222d1cb4f63704dc1cb456a7733ac13be509de7210e4f3ef68095502f871ad42D�_ � 889cf274fa9d2dc353f72daefeafeef0bab8bbc22a11e69f5009602f524dfc5fD�^ � b023cc7bb4beba93c1fa4b4ea3d00f85891637ae3f1692b51863007e799f93e4D�] � 8649585113a6705fe59be338b82b0ec406c0c3351b940dbebdffabd40fbc2eb5D�\ � c24fe30d66c39a6dc7e1701a8503f46d3e747baaf032761258334310ad79e035D�[ � 9952c1ad9640539f832b2907ecca1438442f4d21c5b1159a6b061b54d0245407D�Z � 600d4f94f14cc026544d704f5a8190f1e11d4020dcff350bfca31fef4c037731D�Y � ee225d31e25d3fd9c6524bed27748c75c0944037288a89578e3005fb2eedea8fD�X � b2a7339af908b8ee4bf1f85d0d58404c6e69e1311f16a5ce08f7c4e01629bac6D�W � 3c80748d03286542b429491e9861564380252fcbcd1d92283ddfa799fb2dc3f5 K v�� K �9�eu�WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �dq�'WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�cq�WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�bq�CWOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��aq� WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�kq�CXOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��jq� XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�iq�XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�hq�)XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��gq� XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��fu�-WOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�pu�XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��ou�-XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�nu�XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �mq�'XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�lq�XOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �vq�'YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�uq�YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�tq�CYOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��sq� YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�rq�YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�qq�)YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��|q� ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�{q�ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�zu�YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�yu�YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��xu�-YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�wu�YOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�~q�ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�}q�CZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q�[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� [Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u�ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�ZOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |� u�[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u�[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u�[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q�\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� \Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}[Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u�\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� \Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y� q�C]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� ]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� ]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-\Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�"u�]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��!u�-]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�']Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q�]Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �(q�'^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�'q�^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�&q�C^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��%q� ^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�$q�^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�#q�)^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��.q� _Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�-q�_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�,u�^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�+u�^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��*u�-^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�)u�^Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� k�4 l�9 m�? n�E o�J p�O q�U r�Z t�` u�f v�k w�q x�w y�| z� {� |� }� ~� � ��# ��) ��. ��3 ��9 ��> ��D ��J ��O ��U ��[ ��` ��e ��k ��p ��v ��| �� �� �� �� �� �� ��" ��( ��. ��3 ��9 ��? ��D ��I ��O ��T ��Z ��` ��e ��k ��q ��v ��{ �� �� �� �� �� �� ��# ��( ��- ��3 ��8 ��> ��D ��I ��O ��U ��Z ��_ ��e ��j ��p ��v ��{ �� �� �� �� �� �� ��" ��( ��- ��3 ��9 ��> ��C ��I ��N ��T ��Z ��_ ��e ��k ��p ��u ��{ �� �� �� �� �� A #� � A ��3u�-_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�2u�_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �1q�'_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�0q�_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�/q�C_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �9q�`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�8q�C`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��7q� `Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�6u�_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�5u�_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�4u�_Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�?u�`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�>u�`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�=u�`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��<u�-`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�;u�`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �:q�'`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Dq�aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Cq�)aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Bq� aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Aq�/aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�@u}`Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Iu�aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Hq�'aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Gq�aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Fq�CaOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Eq� aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Oq�CbOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Nq� bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Mq�bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Lq�)bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Kq� bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Ju�-aOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Tu�bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Su�-bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ru�bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Qq�'bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Pq�bOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Zq�'cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Yq�cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Xq�CcOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Wq� cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Vq�cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Uq�)cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��`q� dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�_q�dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�^u�cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�]u�cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��\u�-cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�[u�cOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 e �r+��V��: � � e D�p � 47ba59d4b1cb5b673b1229b14f41032935be9d093380d4ebda5b7a3a020d1829D�o � c19464cde9f5e6924a75e43dc5a5f2a6f67fe7b180bebf78fe28c2a9ea75b38aD�n � 733cd7b64f33a955dabc853a4b1cd0c8c37bf1e8e726fc0bacb1d1ce4472cea3D�m � b0a39d51fd2f8d6d5a8f011e24a249847065815606a7f38e2041f4b496cc0190D�l � a0725d3676ffa6a24b4686e544f68d9c21b869c274d28cebfafb3c70638c371eD�k � bba4318d019ae161e780b129f85d5ab91b299e3b9745f99a659fc52dacdfb221D�j � 6151436b0cdfffbc9de946bc989ec92ce8de7794357a065c433e0c8dfd3e7fdbD�i � 7f851a8769285e3f9758a4eaf850aac198635f11095424df455837066af7c141D�h � 8dbf315b824ef3ed709ed82b3c42515cc6137b6f4eaf95ccff91f5d362b86985D�g � a1970a5fc923219ddca4fa8d05e7f29ee858edf46448313a44734fb4d4c4149dD�f � 22e3e72ea0793e34fa431ce4f6c77af3460b1cd5e67558a3b644f1e438900d99D�e � 42ab3de394252ea2575955dde550d26c4c2d82245f48145c1880b3eee1f049e5D�d � f313883838c79487308bec6209cc25ea688f77759c6bbdb331c4237999334033 A #� � A ��eu�-dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�du�dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �cq�'dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�bq�dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�aq�CdOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �kq�eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�jq�CeOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��iq� eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�hu�dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�gu�dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�fu�dOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�qu�eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�pu�eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�ou�eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��nu�-eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�mu�eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �lq�'eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �vq�fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�uq�)fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��tq� fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�sq�/fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�ru}eOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�{u�fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �zq�'fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�yq�fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�xq�CfOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��wq� fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�CgOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�~q�)gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��}q� gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��|u�-fOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u�gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�gOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � � q�'hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q�hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�ChOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u�hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�hOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�CiOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � � q�jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�CjOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u�iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�iOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�#u�jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�"u�jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�!u�jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �(q�kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�'q�)kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��&q� kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�%q�/kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�$u}jOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�-u�kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �,q�'kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�+q�kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�*q�CkOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��)q� kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�3q�ClOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��2q� lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�1q�lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�0q�)lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��/q� lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��.u�-kOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�8u�lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��7u�-lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�6u�lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �5q�'lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�4q�lOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �>q�'mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�=q�mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�<q�CmOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��;q� mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�:q�mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�9q�)mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Dq� nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Cq�nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Bu�mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Au�mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��@u�-mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�?u�mOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Iu�-nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Hu�nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Gq�'nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Fq�nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Eq�CnOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Oq�oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Nq�CoOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Mq� oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Lu�nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Ku�nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Ju�nOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Uu�oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Tu�oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Su�oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Ru�-oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Qu�oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Pq�'oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Zq�pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Yq�)pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Xq� pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Wq�/pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Vu}oOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�_u�pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �^q�'pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�]q�pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�\q�CpOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��[q� pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�eq�CqOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��dq� qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�cq�qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�bq�)qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��aq� qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��`u�-pOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 e �r+��V��: � � e D�} � 0fa4711e307981d6c9174ab9d2a6a3091cae2a4a43da04ce41a45407c143d240D�| � bffc06b208a2645d2beeed5ae0505ff7be55cec6055ed415ae076e3e74f9aa2eD�{ � 83b3cec745768f57ddcdabe20c4c848fee7126552012cc9fa7a1be366825f4adD�z � b050823fb61726e8976cc72b306b33896e52a61ba34741aaaacac29f20a9d428D�y � f65aabbd9e294d13896f966d93142b9e462abc508dc124cbced08758d3d9247aD�x � f037f86f203b3b15569c8b08388aeeeba9eda00ceac6945410b851d91563d688D�w � de01b8c6bef6e8935094026fbbfa516daaf970a7e92df84e3705c559853ece19D�v � 74cf9b03dd4c4fd8b948481f59523011514a6b13612c953041fe8c112c7aa0d9D�u � e783291d5ab16df4900451958335994c05de05b904aa33cf87682f106e2baf20D�t � 3b72db221eb1db189edcf9c97b83663b0494d24fa1fe73c09e6916b1baaec8e6D�s � eb1886e298af82bc97e979491381fe23e271aabb79f09bef435b84c876817fbdD�r � ad3ed272a76cefffd6cfcbe64c326b1286965a0a1950072cb4a2337f839ca989D�q � a83eb350bcaf8f5bf58970e8c94bdcbdd5f690dc3d7e90d21bf5532d9a597c62 � ~�� � |�ju�qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��iu�-qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�hu�qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �gq�'qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�fq�qOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �pq�'rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�oq�rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�nq�CrOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��mq� rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�lq�rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�kq�)rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��vq� sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�uq�sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�tu�rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�su�rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��ru�-rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�qu�rOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��{u�-sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�zu�sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �yq�'sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�xq�sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�wq�CsOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q�tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�CtOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�~u�sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�}u�sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�|u�sOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u�tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V � q�uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O� q�/uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}tOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u�uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�CuOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�CvOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-uOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |� u�vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�vOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �"q�'wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�!q�wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�CwOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q�wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��(q� xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�'q�xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�&u�wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�%u�wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��$u�-wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�#u�wOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��-u�-xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�,u�xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �+q�'xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�*q�xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�)q�CxOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �3q�yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�2q�CyOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��1q� yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�0u�xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�/u�xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�.u�xOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�9u�yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�8u�yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�7u�yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��6u�-yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�5u�yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �4q�'yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �>q�zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�=q�)zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��<q� zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�;q�/zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�:u}yOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Cu�zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Bq�'zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Aq�zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�@q�CzOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��?q� zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Iq�C{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Hq� {Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Gq�{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Fq�){Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Eq� {Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Du�-zOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Nu�{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Mu�-{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Lu�{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Kq�'{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Jq�{Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Tq�'|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Sq�|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Rq�C|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Qq� |Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Pq�|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Oq�)|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Zq� }Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Yq�}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Xu�|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Wu�|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Vu�-|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Uu�|Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��_u�-}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�^u�}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �]q�'}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�\q�}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�[q�C}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �eq�~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�dq�C~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��cq� ~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�bu�}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�au�}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�`u�}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 e �r+��V��: � � e D� � aae99874c09826e7ffdc47307dc7fa4aa1ef9302e99a8432186772a7619d629dD� � 7621e69d1f6a5287ec45f7ae6e9410b61ce65c095de32ed792b022a4520de7d1D� � f854a25eb972d3b371b5576e432a9a20947bb7be07e83253e98bd2b39025d16aD� � daad2593294d57ecd2ba590f2b8292ca6c1a15ac312f2ce7da8dbb7128a21db5D� � da3a8c2abd8f7012e5d4bebd1103714f6d567dbd1f5281431b01ffd6d61025fbD� � 48c1cdad82823961370ac3c16ed4a93a8b8b46bde9034024316e1a72af9522d4D� � c6f14dac0ec25c398840115e52a340353f02aaea3834f3a0eba9c59477ed29acD� � 682b34f9ba65eb2126b3140d6fe7319d11e990cef5a3d74f66b79f00719e6adaD� � dba6df762c2a7b4df2011636555ed8910dd7c702ac1a8c2233d5bdc1752907ddD� � bece87454982682fbdb7722fda453b231999ee186bb714b2151fb7a2f81a9897D� � 411d4dcdad36f25940ac90a44c595935da1b410049409e9047bf8e5a0d896d00D� � 0ee97394870cffe996ee7e4b916ac7fd3a1843f7b577ee2bf1a309f6b5e3e325D�~ � 79973cc33f53bcaa66861b86f5ca88df66744a2b5a58c2f2f7f0dc2e37c67a36 $ q4�! � $ |�ku�~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�ju�~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�iu�~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��hu�-~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�gu�~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �fq�'~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �pq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�oq�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��nq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�mq�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�lu}~Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�uu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �tq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�sq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�rq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��qq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�{q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��zq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�yq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�xq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��wq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��vu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�~u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �}q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�|q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & �� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �"q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�!q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O� q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w� u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�'u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �&q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�%q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�$q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��#q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�-q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��,q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�+q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�*q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��)q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��(u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�2u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��1u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�0u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �/q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�.q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �8q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�7q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�6q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��5q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�4q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�3q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��>q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�=q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�<u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�;u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��:u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�9u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Cu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Aq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�@q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�?q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Iq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Hq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Gq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Fu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Du��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Mu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Lu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Jq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Tq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Sq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Rq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Qq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Pu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Yu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Xq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Wq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Vq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Uq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�_q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��^q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�]q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�\q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��[q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Zu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�du��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��cu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �aq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�`q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 e �r+��V��: � � e D� � 08ec368681cd5235d44e7c13637d697d5bc44aaf5cfd9f49fc33531191a5717bD� � dbc4de07d0e60afa27428cc96344b4424c8cf8209e8961f014f4989de0ede96dD� � 8ba45a2931417326f5988ff2fa9db54c083bfab2f5fe260ea31072a26b0d9adbD� � d60ccb9327412f5e9b92a65ce3c4d3ec7c9cef9e0d21433888157b9758c62587D� � 966ec9754e2cc3fe39729998dcef6f877a9061b02c36cada54ff696eb4dd98c6D� � ab37db3638f3d63077ca3270c6b587f0147ede183844f7fd95cc12babea8f8a8D� � 94aaf8d6f0db1300c892d45a1a8334173bca651326cfadf717623f714460fe61D� � 6838d1704d6089791d6b3d53de842f0901465128bc97227e71cbfb2073418234D� � 03ea957f3e2be56bc876a29ef48424ad8cc38c240505a263f9907bb55882d20fD� � 32fdc77032a9de115471b54289fc5f0fd4e2fe3f428c90a14db22d18d246a781D� � 0f2b27230afc7e0f0e4681b53e974e613f93cdd1f542dd4b63a37b74db2caa55D� � 6d6d3ccc17a9eee0b41995b6db620df39e9070da91831a1ee3a9c9f9bf6eb135D� � d0a250d18f4b89599438cfd448782db11f8012472af6df48eced91d60be23eb0 6 0�$G � 6 � �jq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�iq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�hq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��gq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�fq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�eq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��pq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�oq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�mu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��lu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��uu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�tu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �sq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�rq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�qq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �{q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�zq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��yq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�wu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�vu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��~u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�}u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �|q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��"q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�!q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��'u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�&u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �%q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�$q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�#q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �-q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�,q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��+q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�*u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�)u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�(u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�3u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�2u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�1u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��0u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�/u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �.q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �8q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�7q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��6q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�5q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�4u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�=u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �<q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�;q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�:q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��9q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Cq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Bq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Aq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�@q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��?q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��>u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Gu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Fu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Eq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Dq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Nq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Lq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Kq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Jq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Iq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Tq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Sq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Qu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Pu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Yu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Wq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Vq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Uq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �_q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�^q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��]q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�\u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�[u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Zu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�du��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�cu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��bu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�au��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �`q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �jq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�iq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��hq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�gq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�fu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 e �r+��V��: � � e D�$ � cd5dcd832d5dda7bea32dbdbe45ad8e13ef022b0a9d83e5b78427944aaab8f18D�# � 847a5e41805b10521ebc6aff29431992c0a22a8d17c634a1e13970158fa1af9cD�" � 45aa06d1829f4839d099598b630eabc9be0756f534ae4a81d0d6b7ab5922bc09D�! � 4e697ffc60fca75a99deb8089617f94c12550b52fd5e8a07ec885967667c7541D� � b6d54a557b4be65879c789367443480c4c3cb12adfbb35c324b6786e2f8ba2a7D� � 65b46c58329dcd3a310fbfb4c8b9371639bb59c96629f150e82a7820305f44fbD� � fc3bab612213d15e8f3305d921a6c746a042fa8d06b3e8b75aa25f4eeced3daeD� � 83c007c9ec430e38dbcdce8b868daa1718da2090b7ef60980dfaeff2c633aa2fD� � 25c4de241ae499bb87004a0bd23c0264cf0e5ec7003c83fa57962fc6ca0fff80D� � d63186e6cef38839b7dec9223b2e71fce4525a6125dbb201cab77ddcd29b6eb3D� � 8126411e939ed28c342373246930b21454d5af2651f4d36c56e7d17b279978ffD� � e4d444d844a4cafb1f7e4fa1a67562e38078b7cbb3816a7216492e9a2d40c822D� � b067b77274a7e008ceafa9fe949f6649af4f291e1fe843cc01d5255b977ff6be K v�� K �9�ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �nq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�lq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��kq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�uq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��tq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�sq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�rq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��qq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��pu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�zu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��yu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �wq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�vq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�~q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��}q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�|q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�{q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A �� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V � q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 of Vflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��" ��' ��- ��2 ��8 ��> ��C ��I ��O ��T ��Y ��_ ��d ��j ��p ��u ��{ �� �� �� �� �� �� ��" ��' ��- ��3 ��8 ��= ��C �H �N �T �Y �_ �e �j �o �u �z � � � � � � �! �' �, �2 �8 �= �C �I �N �S �Y �^ �d �j !�o "�u #�{ $� %� &� '� (� )� *�! +�' ,�- -�2 .�7 /�= 0�B 1�H 2�N 3�S 4�Y 5�_ 6�d 7�i 8�o :�t ;�z <� =� >� ?� @� A� B�! C�& D�, E�2 F�7 G�= H�C I�H J�M K�S L�X M�^ N�d O�i P�o R�u S�z T� U� K v�� K �9�!u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�'q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��&q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�%q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�$q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��#q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��"u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�,u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��+u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�*u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �)q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�(q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �2q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�1q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�0q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��/q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�.q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�-q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��8q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�7q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�6u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�5u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��4u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�3u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��=u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�<u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �;q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�:q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�9q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Cq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Bq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Aq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�@u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�?u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�>u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Iu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Gu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Fu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Dq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Nq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Mq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Lq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Kq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Ju}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Su��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Rq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Qq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Pq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Oq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Yq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Xq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Wq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Vq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Uq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Tu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�^u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��]u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�\u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �[q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Zq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �dq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�cq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�bq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��aq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�`q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�_q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��jq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�iq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�gu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��fu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 e �r+��V��: � � e D�1 � 5bf7fa347b641deaa5b1dd5752635a5a43ee644e71cca2e924839f74490cf862D�0 � 3baf28c0979d5f90558e58f7499f8c92082cc8e9b4e8e68acfa4d95a6a902be4D�/ � 3af5287deb01c0880a6d6916b3fc0ecdfaf93e576369b1b9cfdcc1613bc22a7dD�. � 33beb19a202929092a6e1605a3f6115c5442714589a627267a8ba12528865a7eD�- � 8cab4a117a1efc20543417ed7f4d69f0626329800f58029dc586d0a2bdadea33D�, � 27091e98db08364ca7ce67c92ed7fea1f2ef9a1b64dd06f659d6bb1cf563d729D�+ � a4aa01b378a3f60ccb4500c7b55fd5e37fde220dcb3863302b729de23aefcf5aD�* � 332d0c5fbd59617b2854c4ef7acc7a7862676bdf591666e519d3b09c2f3435e8D�) � ecb4654a5f2ad2d8e3539f0b0076eee523a54eda425ef270ec5cb0394fa1ea8cD�( � 04338d51e121bd3112024a6e032e9dc376c437e7d1914a17d85868c3c59e8f72D�' � d31ed1bf33208a48c1659c4aa33c952c4a88624e0ef52fdda4e5cb196354ac40D�& � d264ee805ecda49c30b17382368adfa7d60dde5fe60862b200ff3a5b11b02cfaD�% � 248724675fc45561c18b6906dfbeacda8c1e9b4451c512be528649e3e34c63b9 A #� � A ��ou�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �mq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�lq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�kq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �uq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�tq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��sq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�qu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�pu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�{u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�zu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�yu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��xu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�wu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �vq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V � q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��~q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�}q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�|u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & �� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��!u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �'q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�&q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��%q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�$u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�#u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�"u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�-u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�,u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�+u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��*u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�)u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �(q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �2q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�1q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��0q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�/q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�.u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�7u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �6q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�5q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�4q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��3q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�=q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��<q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�;q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�:q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��9q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��8u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Au�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�@u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �?q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�>q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Hq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Gq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Fq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Eq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Dq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Cq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Nq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Ju�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Iu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Su�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Qq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Pq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Oq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Yq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Xq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Wq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Vu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Uu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Tu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�_u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�^u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�]u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��\u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�[u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Zq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �dq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�cq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��bq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�aq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�`u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�iu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �hq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�gq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�fq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��eq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�oq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��nq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�lq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��kq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��ju�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 e �r+��V��: � � e D�> � 9bbb081fdd6485184aa28dae8f3c1946680fdf0f31efe538dc75912939ac72efD�= � 041f5f1e8b93254eb47e8b18434325a8ecfea6152330918662e991c8b435cdfeD�< � f5670dae0add00bdfd492611247f9503be7281552df1cc745f5b359269462efdD�; � 64eaa7b016a8e2dfc63c23045a2a81e467d7e0553af8d19b447d9f84265a2b26D�: � ae4a37c25fe4cd0a6a91a2140530796b4b2c6059cf099f2bd2f65504b92e3742D�9 � 53777bef4b884ec988d12664f72eaadc76fa2b24890080c6649e74f9c9769d94D�8 � f7c83637d8468e19213b90ac92d161c309fd5941a55567c16d8598b7ff66e882D�7 � 6389f5f5c812cb020dd4bcf4dc948be8137ffef92ecbea10a81268530ca43c7bD�6 � 18a944fd24888ada7034062b23c8096dad6ee599c3c1262ac434394919b64aeeD�5 � 4535717be95f1dcc2921d19bb37276451f877f99558ee69df6a67597d545a010D�4 � 15a85325dd91b5d41165cb155f2faac7f1c67c75551d52a664027fc559a5c62cD�3 � 2676b39f946e027f903e8815ed686e37a2b8101f353ca2063367ccce93da761bD�2 � 2aba6dcda4b716437cd39f662b144aa8fe26ea6f15b54f36ae5c7340a33c8b36 � ~�� � |�tu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��su�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �qq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�pq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �zq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�yq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�xq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��wq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�vq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�uq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & �� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�~u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�}u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��|u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�{u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � � q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�!q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�&u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��%u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�$u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �#q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�"q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �,q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�+q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�*q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��)q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�(q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�'q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��2q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�1q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�0u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�/u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��.u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�-u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��7u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�6u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �5q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�4q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�3q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �=q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�<q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��;q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�:u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�9u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�8u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Cu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Au��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��@u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�?u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �>q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Hq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Gq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Fq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Eq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Du}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Mu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Lq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Kq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Jq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Iq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Sq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Rq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Qq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Pq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Oq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Nu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Wu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Vu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Uq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Tq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �^q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�]q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�\q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��[q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Zq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Yq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��dq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�cq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�au��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��`u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�_u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��iu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �gq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�fq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�eq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �oq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�nq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��mq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�ju��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 e �r+��V��: � � e D�K � 9db93e031838e2ddbd104024296a70bd847b8e704bfa2e92f767297158bf6b6cD�J � a219a29b75fdb33749412440d21f8b1ff92ad6616637e7e8cb818daf66fabe36D�I � 8864cd46b197d894c0037ac70b483f8091d39212b9cf6ace09e8c117d76a1c12D�H � 0dc9fbacba7b11cb8fe67dd7a2596d89132d937ce3099a1e872d630f5f68fafcD�G � 5a34d2e48c7b78b23d4ae6c9697fa3094d3e9bc3dfdb7d09f1670206a32b7e46D�F � 23bb9783bb909c0cddbbcaeb08d2ecd0d27ba3325b65571783ef5837be019a60D�E � af59395f80e4a8af28d6c6ccafe41de973b85b01eae99f978460cfe0198a5ee6D�D � f93d558436474dcf26feea265313045cb98abbe57849c1f0f07a622d83612eb1D�C � 30fb1512e1cb3b565ab1bc735499011c641766b730df4ce0ba6baf035db92c70D�B � 9d6605784a491b25286fafef98f82226f7634b2197c483f0273690b3701d2853D�A � cfbce8f5d94f01a7ce8c1dc8545168b7c3c1c2a62bae89f00a69ebd439002ffaD�@ � c5b8ab0d8d7cb70f48d43af7b11ed34cd4a069ee3f243e0b5c1601adbbf3b7baD�? � 87421442fb8dc3f0b7025e35dcc33c47b33e35e6cff668106fc871a7fdc443b7 $ q4�! � $ |�uu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�tu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�su��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��ru�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�qu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �pq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �zq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�yq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��xq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�wq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�vu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �~q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�}q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�|q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��{q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �!q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�'u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�&u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�%u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��$u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�#u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �"q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �,q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�+q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��*q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�)q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�(u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�1u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �0q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�/q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�.q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��-q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�7q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��6q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�5q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�4q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��3q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��2u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�<u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��;u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�:u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �9q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�8q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Bq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Aq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�@q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��?q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�>q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�=q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Hq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Gq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Fu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Du�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Cu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Mu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Kq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Jq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Iq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Sq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Rq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Qq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Pu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Yu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Wu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Vu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Uu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Tq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �^q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�]q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��\q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�[q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Zu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�cu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �bq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�aq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�`q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��_q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�iq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��hq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�gq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�fq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��eq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��du�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��mu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �kq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�jq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 e �r+��V��: � � e D�X � 758f0b0b263f27bf6a17362a156e2d236f0210bb8fd11a69dbd5e2d9ca1be328D�W � c0676678d1a3bcf8ce6a786607357db6145dd2dff6d685cc3e3b7312511343fcD�V � 0e63c2347e36ece8d4f15909b64a5a6c3b79f38a6e53f614e310fbfd86f26b06D�U � f9c8ee59079e1a20cac32e3fe1b20f6f94b271c132efb4de7f5f0ebad73c632dD�T � 6813b3fd706e79a0721cb26c926c2fdd57aaf1300c3f48cd8573cbf02eb06168D�S � 3a7a5d5027216e07b3eae0f5b2cf013760700d03cca8961ca4395cd637ac3c5eD�R � 2b0dc7f8c8bffbe06bd0124f1cbc07bb9eda4e34b45db595e6101d68eee5ebedD�Q � 37356ac1734506c064e4fdf1e87d69a442a12767a7e98626e8c9c571fb460198D�P � 4874985f1d75f7c43dceb6929982f36fc7a9566042a70c22a42bc6e3e6a65b58D�O � a52c89128003d6c528346ece42b32f7126708399f05995deaa7aa1e7035625a9D�N � 9c90fdb57f5b173c0200715d87a85083b5f8dd268a7aef1df7baddcd4f7ba0adD�M � c7df39cc317144af8cab982c0134ec6182c78bfaafe8e47f94f33a0cd4991c97D�L � c9587fe47330c8c9650ddea3de6ed9574b7027a816ed5dc48c5f19783f043700 6 0�$G � 6 � �tq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�sq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�rq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��qq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�pq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�oq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��zq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�yq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�wu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��vu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�uu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�~u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �}q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�|q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�{q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O� q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w� u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �&q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�%q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�$q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��#q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�"q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�!q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��,q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�+q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�*u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�)u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��(u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�'u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��1u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�0u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �/q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�.q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�-q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �7q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�6q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��5q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�4u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�3u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�2u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�=u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�<u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�;u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��:u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�9u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �8q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Bq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Aq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��@q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�?q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�>u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Gu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Fq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Eq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Dq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Cq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Mq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Lq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Kq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Jq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Iq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Hu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Qu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Pu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Oq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Nq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Xq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Wq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Vq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Uq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Tq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Sq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��^q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�]q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�\u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�[u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Zu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Yu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��cu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �aq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�`q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�_q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �iq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�hq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��gq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�fu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�du��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�mu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��lu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �jq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �tq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�sq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��rq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�qq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�pu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 e �r+��V��: � � e D�e � c3729b12ca4075c75da87d40054a8cd81d3a2be928846fec9b090f2282da0809D�d � f0254a038a74be08cf548424dccbe986696e47e0e50cd52cf8f1ecdf5cf432b0D�c � e1db7a00d2204d116b7e75f87e236094c6578a2ebf4a48a7af11edd3618ebce3D�b � b233baa0fb9d61676aea025d1f7b834810ad66467adee309673c302ed29261eeD�a � 87b930e9a82a5887d60c5bf35a95284a59744832eca1423a916a46ac5dc807a3D�` � 7d0c45c842a51eb4e14eecce16a8da906ea6668258c6fe279d9649645d4bd422D�_ � a4124d55ffe94d6e2682cb82eb1191d84b8b271f2950a8cbf86be4ade606a768D�^ � 58a5f6025a63f07b9dc9793ec13c58029a3502315d1bb29d4c7015091c9e8dbeD�] � c565a665dee8bff0a1df1f9e228b65e7935723b9a6e91ae26f4b30dc3b90452bD�\ � 2f00c2ff15b5c113c361dc4ad8be22ff7ec2bde7c1098b7abe496171dc1d7b49D�[ � 84e0987f67e674a41976b9cd147cec00e6c57db8a4feeb9b141b7fb607b890efD�Z � 8d6cfc5c9cef32a028f7938e7be7de7b81bde37d434b23891fb9c2f0583c18dfD�Y � 164f86624a46a2f71b3b2a951d0544b44be7971180929255dc526785acc3a143 K v�� K �9�yu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �xq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�wq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�vq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��uq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��~q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�}q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�|q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��{q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��zu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� W� X� Y� Z�! [�' \�, ]�1 ^�7 _�< `�B a�H b�M c�S d�Y e�^ f�c g�i h�n j�t k�z l� m� n� o� p� q� r� s�& t�, u�1 v�7 w�= x�B y�G z�M {�R |�X }�^ ~�c �i ��o ��t ��y �� �� �� �� �� �� ��! ��+ ��5 ��@ ��K ��V ��a ��l ��v �� �� �� ��" ��- ��8 ��C ��M ��W ��a ��k ��u �� �� �� �� ��+ ��6 ��A ��K ��U ��` ��k ��v �� �� �� �� ��, ��8 ��D ��O ��Z ��e ��p ��{ �� �� �� ��) ��5 ��@ ��L ��X ��d ��p ��| �� �� �� ��) ��5 ��? & �/�2 � & ��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�!u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 K ��?��I � � K O�+aA�Eike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�*_S�Jan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�)aA�Eike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�(aA�Eike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�'aA�Eike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�&aA�Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��%_�-�Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�$aA�Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�#_w�Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresw�"u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 q �@�e�o � q O�5aA�Eike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�4_S�Jan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�3aA�Eike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�2aA�Eike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�1aA�Eike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�0aA�Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��/_�-�Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�.aA�Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�-_w�Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresQ�,cC�Eike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1 3 �#�-��/ � � 3 Q�@cC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�?cC�Eike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�>cC�Eike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O�=aA�Eike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�<_S�Jan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�;aA�Eike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�:aA�Eike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�9aA�Eike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�8aA�Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��7_�-�Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9Q�6cC�Eike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1 5 w%��/��/ � � 5 O�KaA�Eike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1Q�JcC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�IcC�Eike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�HcC�Eike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O�GaA�Eike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�F_S�Jan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�EaA�Eike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�DaA�Eike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�CaA�Eike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�BaA�Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��A_�-�Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9 - �\�\�% � - O�VaA�Eike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�UaA�Eike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1Q�TcC�Eike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� �Se�3�Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�RcC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�QcC�Eike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�PcC�Eike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O�OaA�Eike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�N_S�Jan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�MaA�Eike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�LaA�Eike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2 % �T�Zw# � w % O�aaA�Eike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�`_S�Jan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�_aA�Eike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1Q�^cC�Eike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� �]e�3�Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�\cC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�[cC�Eike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�ZcC�Eike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O�YaA�Eike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�X_S�Jan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�WaA�Eike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1 ' �Xu!�y' � { ' Q�lcC�Eike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O�kaA�Eike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�j_S�Jan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�iaA�Eike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1Q�hcC�Eike Rathke <erack@redhat.com> - 102.13.0-2d��- Update to 102.13.0 build2Q�gcC�Eike Rathke <erack@redhat.com> - 102.13.0-1d�r@- Update to 102.13.0 build1Q�fcC�Eike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� �ee�3�Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�dcC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�ccC�Eike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�bcC�Eike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1 B �X�u!�y% � B � �ve�3�Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�ucC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�tcC�Eike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�scC�Eike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1Q�rcC�Eike Rathke <erack@redhat.com> - 102.13.0-2d��- Update to 102.13.0 build2Q�qcC�Eike Rathke <erack@redhat.com> - 102.13.0-1d�r@- Update to 102.13.0 build1Q�pcC�Eike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� �oe�3�Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�ncC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�mcC�Eike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1 e �r+��V��: � � e D�r � 158e955d20950ef61a38c645accc22bd6cf37c7f31e06cdd3313c2bc5b0d969fD�q � 74484befc2ade710df325b9af62b87ffaef3b2b13a00935396297467ec8e98a8D�p � e0d62271ecc1d123dd2dfe6e63131923215ed05f9f87bb42cbe1c713b4cfec5dD�o � 4eb117f25866c9e447c845336fe608b5c30ec80262a6ffb3dfb33756f0001e62D�n � dd98390ecb2875b55a18bb8ce2f4fe960e7d8f308cf206decddcbcf25c6638c0D�m � 9e0249e756fa1e3dfb334a1acf42d322e19676dcef92227940e29b52a2972853D�l � 6341f007df657335759aa49bd308613667e9481106e29eff6fe1a74abfc9200aD�k � ce4f5cfaaa8ee847baeaa1449c9bda07462f87ac1b32027dc3d2b1086d417890D�j � 3fb0b77a99715fb931ff65f91089240046d339752c82495a1069470792e26818D�i � ea41aafc4258682847158cad9b72b66d86e801649ba22dfbbb766d88ea1addafD�h � 2699d7c26ffc9f022f434f324f0530dfee3fbaba767104e9902922124ba69b63D�g � 155f2a67548cb8ab54265b28dbf3f1e731e26cf182da45d98c95425930890046D�f � 97f2f474f7e410b8f477b1e905b6207ab4497c4def5fa6005eca7739687d0fca . �X�[ �e � . Q�cC�Eike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� � e�3�Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�cC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�~cC�Eike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�}cC�Eike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1K�|c7�Eike Rathke <erack@redhat.com> - 102.14.0-3d��- Bump NVR to rebuildR�{aG�Jan Horak <jhorak@redhat.com> - 102.14.0-2d��- Rebuild due to rhbz#2228948Q�zcC�Eike Rathke <erack@redhat.com> - 102.14.0-1d��@- Update to 102.14.0 build1Q�ycC�Eike Rathke <erack@redhat.com> - 102.13.0-2d��- Update to 102.13.0 build2Q�xcC�Eike Rathke <erack@redhat.com> - 102.13.0-1d�r@- Update to 102.13.0 build1Q�wcC�Eike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1 . �X�a �* � � . Q� cC�Eike Rathke <erack@redhat.com> - 102.13.0-2d��- Update to 102.13.0 build2Q� cC�Eike Rathke <erack@redhat.com> - 102.13.0-1d�r@- Update to 102.13.0 build1Q� cC�Eike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� � e�3�Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�cC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�cC�Eike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1K�c7�Eike Rathke <erack@redhat.com> - 102.14.0-3d��- Bump NVR to rebuildR�aG�Jan Horak <jhorak@redhat.com> - 102.14.0-2d��- Rebuild due to rhbz#2228948Q�cC�Eike Rathke <erack@redhat.com> - 102.14.0-1d��@- Update to 102.14.0 build1Q�cC�Eike Rathke <erack@redhat.com> - 102.13.0-2d��- Update to 102.13.0 build2Q�cC�Eike Rathke <erack@redhat.com> - 102.13.0-1d�r@- Update to 102.13.0 build1 . �W �a ~* � � . Q�cC�Eike Rathke <erack@redhat.com> - 102.14.0-1d��@- Update to 102.14.0 build1Q�cC�Eike Rathke <erack@redhat.com> - 102.13.0-2d��- Update to 102.13.0 build2Q�cC�Eike Rathke <erack@redhat.com> - 102.13.0-1d�r@- Update to 102.13.0 build1Q�cC�Eike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� �e�3�Anton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�cC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�cC�Eike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�cC�Eike Rathke <erack@redhat.com> - 102.15.0-1d�F@- Update to 102.15.0 build2K�c7�Eike Rathke <erack@redhat.com> - 102.14.0-3d��- Bump NVR to rebuildR�aG�Jan Horak <jhorak@redhat.com> - 102.14.0-2d��- Rebuild due to rhbz#2228948Q� cC�Eike Rathke <erack@redhat.com> - 102.14.0-1d��@- Update to 102.14.0 build1 i �] �q �{) � i l�"_}�Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�!_A�Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O� aA�Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O� aA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O� aA�Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O� aA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L� ]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0Q�cC�Eike Rathke <erack@redhat.com> - 102.15.0-1d�F@- Update to 102.15.0 build2K�c7�Eike Rathke <erack@redhat.com> - 102.14.0-3d��- Bump NVR to rebuildR�aG�Jan Horak <jhorak@redhat.com> - 102.14.0-2d��- Rebuild due to rhbz#2228948 j �\�r �|+ � j O�-aA�Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�,_}�Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�+_A�Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�*aA�Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�)aA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�(aA�Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�'aA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�&]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�%_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0O�$aA�Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�#aA�Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1 D �\ �f�T � D O�8aA�Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�7_w�Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�6aA�Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�5aA�Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�4_}�Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�3_A�Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�2aA�Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�1aA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�0aA�Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�/aA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1O�.aA�Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1 D �\ �g��T � � D O�CaA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�BaA�Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�A_w�Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�@aA�Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�?aA�Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�>_}�Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�=_A�Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�<aA�Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�;aA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�:aA�Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�9aA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1 _ �]��J�� � _ O�MaA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�LaA�Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��K_�-�Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�JaA�Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�I_w�Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�HaA�Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�GaA�Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�F_}�Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�E_A�Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�DaA�Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1 ` �]��J�� � ` N�W_A�Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�VaA�Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��U_�-�Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�TaA�Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�S_w�Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�RaA�Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�QaA�Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�P_}�Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�O_A�Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�NaA�Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1 _ �?��/�T � _ N�a_A�Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�`aA�Eike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�_aA�Eike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�^aA�Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��]_�-�Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�\aA�Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�[_w�Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�ZaA�Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�YaA�Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�X_}�Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtc ^ �?��/�T � ^ O�kaA�Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�jaA�Eike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�iaA�Eike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�haA�Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��g_�-�Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�faA�Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�e_w�Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�daA�Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�caA�Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�b_}�Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtc s �B�g�q � s O�uaA�Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�taA�Eike Rathke <erack@redhat.com> - 102.9.0-3d �- Update to 102.9.0 build2W�s_S�Jan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�raA�Eike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�qaA�Eike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�paA�Eike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�oaA�Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��n_�-�Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�maA�Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�l_w�Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer features e �r+��V��: � � e D� � 107322552a77011bd81b348ebfbb5f9181eec6a6de74a1a746e6bccf9773e1a6D�~ � 7cc5e8e7cd7fd7b33ddc2f01d6d1866e7073a0a2e8ec65d4a8b21009e3f67777D�} � b9339ad70e81b9edbe99c176f811eaa3f6b5564cff528ff56f4f44d677623c02D�| � 5b68af3481bd9ec99e96979c742095c04ad5a420aca88d0278499ae1949f56d7D�{ � 649668855741b2c9edbad09dfdf69374c2011e1b429ea28cf0f6c96a62a14f57D�z � a2cead9a7e5666819ec51f9e5c76ccde1eaf396651494f7020eb59615a2f9a17D�y � a019256591b9ba5eafbd13f6202b604bb7a7441347110ad87f864f0f8d374298D�x � 1a25dc8c20fd98c6b44d7a50ee5bbeab01a9250c1764965613176ca25661a781D�w � 39a345eb07bae6f35b9362289fb910cb39998826047249bc3991a0ab55547bceD�v � eabf42cd353ef8d1bad1431cc770d9f360563c64237198926aaa475aab327c3dD�u � daff96fd89f92832ea99fda83cf1b76e717202ee8aa4dbe27e75350ce028065fD�t � 469ca6e8993db68735d7333e493a80dd4dde10f37d4c15b290e072922a543da8D�s � a83374c57cbdfe6fe09065ecf3df2781d4ed835b1b41143f2b4e74dde0e6a8cd , �B�g�q � , ��a�K�Eike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URLO�~aA�Eike Rathke <erack@redhat.com> - 102.9.0-3d �- Update to 102.9.0 build2W�}_S�Jan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�|aA�Eike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�{aA�Eike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�zaA�Eike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�yaA�Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��x_�-�Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�waA�Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�v_w�Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer features ! �\ �K��` s ! O� aA�Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1�� a�K�Eike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URLQ�cC�Eike Rathke <erack@redhat.com> - 115.10.0-1f-�- Update to 115.10.0 build1K�_;�Jan Horak <jhorak@redhat.com> - 115.9.1-2f-�- Removed expat CVE fixH�a3�Eike Rathke <erack@redhat.com> - 115.9.1-1e�r�- Update to 115.9.1O�aA�Eike Rathke <erack@redhat.com> - 115.9.0-2e�8@- Update to 115.9.0 build2j�aw�Eike Rathke <erack@redhat.com> - 115.9.0-1e�C�- Update to 115.9.0 build1 - Fix expat CVE-2023-52425O�aA�Eike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1O�aA�Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�aA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O� aA�Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1 h �\ �K �^ � h O�aA�Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�aA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O�aA�Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1Q�cC�Eike Rathke <erack@redhat.com> - 115.10.0-1f-�- Update to 115.10.0 build1K�_;�Jan Horak <jhorak@redhat.com> - 115.9.1-2f-�- Removed expat CVE fixH�a3�Eike Rathke <erack@redhat.com> - 115.9.1-1e�r�- Update to 115.9.1O�aA�Eike Rathke <erack@redhat.com> - 115.9.0-2e�8@- Update to 115.9.0 build2j�aw�Eike Rathke <erack@redhat.com> - 115.9.0-1e�C�- Update to 115.9.0 build1 - Fix expat CVE-2023-52425O� aA�Eike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1O� aA�Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O� aA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1 f �A��V�\ � f O� aA�Eike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1O� aA�Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O� aA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O� aA�Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1Q� cC�Eike Rathke <erack@redhat.com> - 115.11.0-1f:�- Update to 115.11.0 build1Q�cC�Eike Rathke <erack@redhat.com> - 115.10.0-1f-�- Update to 115.10.0 build1K�_;�Jan Horak <jhorak@redhat.com> - 115.9.1-2f-�- Removed expat CVE fixH�a3�Eike Rathke <erack@redhat.com> - 115.9.1-1e�r�- Update to 115.9.1O�aA�Eike Rathke <erack@redhat.com> - 115.9.0-2e�8@- Update to 115.9.0 build2j�aw�Eike Rathke <erack@redhat.com> - 115.9.0-1e�C�- Update to 115.9.0 build1 - Fix expat CVE-2023-52425O�aA�Eike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1 K �A��T �\ � K O�+aA�Eike Rathke <erack@redhat.com> - 115.9.0-2e�8@- Update to 115.9.0 build2j�*aw�Eike Rathke <erack@redhat.com> - 115.9.0-1e�C�- Update to 115.9.0 build1 - Fix expat CVE-2023-52425O�)aA�Eike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1O�(aA�Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�'aA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1Q�&cC�Eike Rathke <erack@redhat.com> - 115.11.0-1f:�- Update to 115.11.0 build1Q�%cC�Eike Rathke <erack@redhat.com> - 115.10.0-1f-�- Update to 115.10.0 build1K�$_;�Jan Horak <jhorak@redhat.com> - 115.9.1-2f-�- Removed expat CVE fixH�#a3�Eike Rathke <erack@redhat.com> - 115.9.1-1e�r�- Update to 115.9.1O�"aA�Eike Rathke <erack@redhat.com> - 115.9.0-2e�8@- Update to 115.9.0 build2j�!aw�Eike Rathke <erack@redhat.com> - 115.9.0-1e�C�- Update to 115.9.0 build1 - Fix expat CVE-2023-52425 k �g�k�u � k H�6a3�Eike Rathke <erack@redhat.com> - 115.9.1-1e�r�- Update to 115.9.1O�5aA�Eike Rathke <erack@redhat.com> - 115.9.0-2e�8@- Update to 115.9.0 build2j�4aw�Eike Rathke <erack@redhat.com> - 115.9.0-1e�C�- Update to 115.9.0 build1 - Fix expat CVE-2023-52425O�3aA�Eike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1O�2aA�Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�1aA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1Q�0cC�Eike Rathke <erack@redhat.com> - 115.12.0-1f_�- Update to 115.12.0 build1Q�/cC�Eike Rathke <erack@redhat.com> - 115.11.0-1f:�- Update to 115.11.0 build1Q�.cC�Eike Rathke <erack@redhat.com> - 115.10.0-1f-�- Update to 115.10.0 build1K�-_;�Jan Horak <jhorak@redhat.com> - 115.9.1-2f-�- Removed expat CVE fixH�,a3�Eike Rathke <erack@redhat.com> - 115.9.1-1e�r�- Update to 115.9.1 � �^ �b�|. � � H�Aa3�Eike Rathke <erack@redhat.com> - 115.3.1-1e�@- Update to 115.3.1K�@_;�Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRK�?_;�Jan Horak <jhorak@redhat.com> - 115.2.0-3d��- Update to 115.2.0 ESRK�>_;�Jan Horak <jhorak@redhat.com> - 115.1.0-1d�E@- Update to 115.1.0 ESRK�=_;�Jan Horak <jhorak@redhat.com> - 115.0.2-1d�-@- Update to 115.0.2 ESRG�<_3�Jan Horak <jhorak@redhat.com> - 115.0b8-1d��@- Update to 115.0b8Q�;cC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�:cC�Eike Rathke <erack@redhat.com> - 115.12.0-1f_�- Update to 115.12.0 build1Q�9cC�Eike Rathke <erack@redhat.com> - 115.11.0-1f:�- Update to 115.11.0 build1Q�8cC�Eike Rathke <erack@redhat.com> - 115.10.0-1f-�- Update to 115.10.0 build1K�7_;�Jan Horak <jhorak@redhat.com> - 115.9.1-2f-�- Removed expat CVE fix � g�o%��; � � H�Ka3�Eike Rathke <erack@redhat.com> - 115.3.1-1e�@- Update to 115.3.1K�J_;�Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRK�I_;�Jan Horak <jhorak@redhat.com> - 115.2.0-3d��- Update to 115.2.0 ESRK�H_;�Jan Horak <jhorak@redhat.com> - 115.1.0-1d�E@- Update to 115.1.0 ESRK�G_;�Jan Horak <jhorak@redhat.com> - 115.0.2-1d�-@- Update to 115.0.2 ESRG�F_3�Jan Horak <jhorak@redhat.com> - 115.0b8-1d��@- Update to 115.0b8Q�EcC�Eike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2O�DaA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O�CaA�Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1��Ba�K�Eike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL ] g�y+��A � ] ��Ua�K�Eike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URLH�Ta3�Eike Rathke <erack@redhat.com> - 115.3.1-1e�@- Update to 115.3.1K�S_;�Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRK�R_;�Jan Horak <jhorak@redhat.com> - 115.2.0-3d��- Update to 115.2.0 ESRK�Q_;�Jan Horak <jhorak@redhat.com> - 115.1.0-1d�E@- Update to 115.1.0 ESRK�P_;�Jan Horak <jhorak@redhat.com> - 115.0.2-1d�-@- Update to 115.0.2 ESRG�O_3�Jan Horak <jhorak@redhat.com> - 115.0b8-1d��@- Update to 115.0b8O�NaA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O�MaA�Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1��La�K�Eike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL R �\ �r$��= � R O�`aA�Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1��_a�K�Eike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URLH�^a3�Eike Rathke <erack@redhat.com> - 115.3.1-1e�@- Update to 115.3.1K�]_;�Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRK�\_;�Jan Horak <jhorak@redhat.com> - 115.2.0-3d��- Update to 115.2.0 ESRK�[_;�Jan Horak <jhorak@redhat.com> - 115.1.0-1d�E@- Update to 115.1.0 ESRK�Z_;�Jan Horak <jhorak@redhat.com> - 115.0.2-1d�-@- Update to 115.0.2 ESRG�Y_3�Jan Horak <jhorak@redhat.com> - 115.0b8-1d��@- Update to 115.0b8O�XaA�Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�WaA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O�VaA�Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1 J �\�r$�@ � � J O�kaA�Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�jaA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O�iaA�Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1��ha�K�Eike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URLH�ga3�Eike Rathke <erack@redhat.com> - 115.3.1-1e�@- Update to 115.3.1K�f_;�Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRK�e_;�Jan Horak <jhorak@redhat.com> - 115.2.0-3d��- Update to 115.2.0 ESRK�d_;�Jan Horak <jhorak@redhat.com> - 115.1.0-1d�E@- Update to 115.1.0 ESRK�c_;�Jan Horak <jhorak@redhat.com> - 115.0.2-1d�-@- Update to 115.0.2 ESRO�baA�Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�aaA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1 J �`�v+�@ � � J O�vaA�Eike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1O�uaA�Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�taA�Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O�saA�Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1��ra�K�Eike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URLH�qa3�Eike Rathke <erack@redhat.com> - 115.3.1-1e�@- Update to 115.3.1K�p_;�Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRK�o_;�Jan Horak <jhorak@redhat.com> - 115.2.0-3d��- Update to 115.2.0 ESRK�n_;�Jan Horak <jhorak@redhat.com> - 115.1.0-1d�E@- Update to 115.1.0 ESRK�m_;�Jan Horak <jhorak@redhat.com> - 115.0.2-1d�-@- Update to 115.0.2 ESRO�laA�Eike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1 e �r+��V��: � � e D� � 7724d8a7b5c53b6b19107130e41d127672ad5e6814dd6d9cdf6130a27f22354bD� � 6a6db0a030199ad5a8e0edde0f8458ca5391f94ac4ccd7a93c3c186326026cc3D� � d09bdd004c3fac87661119d619afb43d9ad9824ef8a2e58fa51c55f0211f12d9D� � de58dba9cc8af79c110d13626931309529fa1a8782a121fbfc29dd03e58e58b6D� � 13154f5e2510e00d260ae211027b13f44ca11e49508ba2237ccccda2eea337b2D� � fc48a72a9a0a8898553b10f1e151b5cb865e23d1ae5200c58cf22572c71ff6acD� � a6fc6ceec2ef96703e31fadfc56988518eb77de39ff4fd2e69fa98b88e033dd7D� � 843fb795c9bf323f16859c41219123409abcc114812537da012befe15091fbc3D� � 6d8bf16512d109e75893de1fd5c3fff8aa8557a12556eccd6e6c8fbfd7f184adD� � 74e98e4966e80435f954bb2859be485730a97c3e547acc848d76d50f49af0329D� � 06de00e45a444bd8381c6526ee4a204b80511ebbca8c8b0b52bfd9d9bacec74cD� � 2f160bf3a57455fd82821ea858e6ab2789596f1ae502a2b3968383670f17296fD� � 33dd225ef7b01c077e7d0977782fa69f3d8fd4cea6363f4cde213cc37694b3a2 . �g�|*�� � | . K�_;Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESRH� a3 Eike Rathke <erack@redhat.com> - 115.9.1-1e�r�- Update to 115.9.1O�aA Eike Rathke <erack@redhat.com> - 115.9.0-2e�8@- Update to 115.9.0 build2j�~aw Eike Rathke <erack@redhat.com> - 115.9.0-1e�C�- Update to 115.9.0 build1 - Fix expat CVE-2023-52425O�}aA Eike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1O�|aA Eike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�{aA Eike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O�zaA Eike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1��ya�K Eike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URLH�xa3 Eike Rathke <erack@redhat.com> - 115.3.1-1e�@- Update to 115.3.1K�w_; Jan Horak <jhorak@redhat.com> - 115.3.0-1e 0@- Update to 115.3.0 ESR � �x&�g � H� a3Eike Rathke <erack@redhat.com> - 115.3.1-1e�@- Update to 115.3.1H� a3Eike Rathke <erack@redhat.com> - 115.9.1-1e�r�- Update to 115.9.1O� aAEike Rathke <erack@redhat.com> - 115.9.0-2e�8@- Update to 115.9.0 build2j�awEike Rathke <erack@redhat.com> - 115.9.0-1e�C�- Update to 115.9.0 build1 - Fix expat CVE-2023-52425O�aAEike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1O�aAEike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�aAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O�aAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1��a�KEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URLH�a3Eike Rathke <erack@redhat.com> - 115.3.1-1e�@- Update to 115.3.1 | g�q �` � | H�a3Eike Rathke <erack@redhat.com> - 115.3.1-1e�@- Update to 115.3.1K�_;Jan Horak <jhorak@redhat.com> - 115.9.1-2f-�- Removed expat CVE fixH�a3Eike Rathke <erack@redhat.com> - 115.9.1-1e�r�- Update to 115.9.1O�aAEike Rathke <erack@redhat.com> - 115.9.0-2e�8@- Update to 115.9.0 build2j�awEike Rathke <erack@redhat.com> - 115.9.0-1e�C�- Update to 115.9.0 build1 - Fix expat CVE-2023-52425O�aAEike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1O�aAEike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�aAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O� aAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1�� a�KEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL 7 g�q �` � � 7 I� ]9Jan Horak <jhorak@redhat.com> - 68.6.1-1^��- Update to 68.6.1 ESRA� G?Jan Horak <jhorak@redhat.com>^_�@- Update to 68.6.0 build1K� _;Jan Horak <jhorak@redhat.com> - 115.9.1-2f-�- Removed expat CVE fixH� a3Eike Rathke <erack@redhat.com> - 115.9.1-1e�r�- Update to 115.9.1O� aAEike Rathke <erack@redhat.com> - 115.9.0-2e�8@- Update to 115.9.0 build2j�awEike Rathke <erack@redhat.com> - 115.9.0-1e�C�- Update to 115.9.0 build1 - Fix expat CVE-2023-52425O�aAEike Rathke <erack@redhat.com> - 115.8.0-1e�Y�- Update to 115.8.0 build1O�aAEike Rathke <erack@redhat.com> - 115.7.0-1e�o�- Update to 115.7.0 build1O�aAEike Rathke <erack@redhat.com> - 115.6.0-1exK@- Update to 115.6.0 build1O�aAEike Rathke <erack@redhat.com> - 115.5.0-1eSa@- Update to 115.5.0 build1��a�KEike Rathke <erack@redhat.com> - 115.4.0-1e.w@- Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL _ �W�g"��T � _ W�,mEMartin Stransky <stransky@redhat.com> - 68.7.0-3^��@- Added fix for rhbz#1821418L�+]?Jan Horak <jhorak@redhat.com> - 68.7.0-2^�k@- Update to 68.7.0 build3I�*]9Jan Horak <jhorak@redhat.com> - 68.6.1-1^��- Update to 68.6.1 ESRA�)G?Jan Horak <jhorak@redhat.com>^_�@- Update to 68.6.0 build1B�(GAJan Horak <jhorak@redhat.com>_>e�- Update to 68.12.0 build1B�'GAJan Horak <jhorak@redhat.com>_{�- Update to 68.11.0 build1B�&GAJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�%G}Jan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3F�$GIJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesA�#G?Jan Horak <jhorak@redhat.com>^�l@- Update to 68.8.0 build1W�"mEMartin Stransky <stransky@redhat.com> - 68.7.0-3^��@- Added fix for rhbz#1821418L�!]?Jan Horak <jhorak@redhat.com> - 68.7.0-2^�k@- Update to 68.7.0 build3 U �s��A��S � U [�8]]Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�7_?Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�6_?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�5_?Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�4]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�3]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build1B�2GAJan Horak <jhorak@redhat.com>_>e�- Update to 68.12.0 build1B�1GAJan Horak <jhorak@redhat.com>_{�- Update to 68.11.0 build1B�0GAJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�/G}Jan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3F�.GIJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesA�-G?Jan Horak <jhorak@redhat.com>^�l@- Update to 68.8.0 build1 G �g�}.��> � � G M�D_?Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�C_1Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�B]]Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�A_?Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�@_?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�?_?Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�>]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�=]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build1H�<a3Eike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�;_?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�:_?Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�9_1Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1 x �e�g �~3 � x f�OaoEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�NaAEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�Ma3Eike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�L_?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�K_?Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�J_1Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�I]]Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�H_?Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�G_?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1H�Fa3Eike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�E_?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1 [ �T�] �r � [ Y�ZaU Eike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�Yao Eike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�XaA Eike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�Wa3 Eike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�V_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�U_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�T_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�S]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�R_? Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�Q_? Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1Y�PaUEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release) e �R �i �c � e M�e_? Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2O�daA Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�caU Eike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�bao Eike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�aaA Eike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�`a3 Eike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�__? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�^_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�]_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�\]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�[_? Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2 e �Y �n �W � e M�p_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�o_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2O�naA Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�maU Eike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�lao Eike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�kaA Eike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�ja3 Eike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�i_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�h_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�g_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�f]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepage i �c��L��T � i H�{a3 Eike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�z_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�y_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2O�xaA Eike Rathke <erack@redhat.com> - 78.13.0-2a �- Update to 78.13.0 build2O�waA Eike Rathke <erack@redhat.com> - 78.13.0-1a /�- Update to 78.13.0 build1Q�v_G Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�uaA Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�taU Eike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�sao Eike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�raA Eike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�qa3 Eike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0 e �r+��V��: � � e D� � b351574a459bf47d5aed5e921e49e33fc565cab9b3d72ce5cd6fefba1b6f83c9D� � a64d622fd50cce3d3743013a5534e4fed4985139f60314ee23246e08601835cfD� � 765577455a2956ce537d4c4d5768286fbead171668c41853b5d6f0989dd4013cD� � 6ce9a07c50256531ba281b344b048ba26881b6d3612f2c4ee5f35d0801d8be57D� � 4276584eb593d2fb304ab50518d7e2c4f955abe8fc5b3d1b9f0dd053d363f298D� � cb3a549fe050cd75184479500b542065e37366ce62d90769646352bf2d9798a2D� � d8f95fca6716286e91c7ab7b9be9bd359800c870cc0bdb90128bf93397e9352dD� � 54c6e6aa53fe175c25dc35fe3f6476d9b195d85a4fc5e64d5625d1731cc5b1ceD� � c95a549af2d83400b97e70bcf7ebf1fbbb8b58bb768c6f7761edc982d7326504D� � 06c9237d3d292ac356ab89dc89e2e9d7f41d6b52eaa838d872573cdeac93d2e7D� � 2a94cd35eaf2c096188c8f30e38bb1ae656122294b6b2f692f185e9533bf7f02D� � 4612dc1b815321d8acda2baafa9107d32d2e88453f1c98a341c59936db87f826D� � 64a964dbf122edcb897186c8824b60976d45bd7ddce017d938404771e1396a1e I �E��C��O � I f�aoEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�aAEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�a3Eike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�_?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1O�aA Eike Rathke <erack@redhat.com> - 78.13.0-2a �- Update to 78.13.0 build2O�aA Eike Rathke <erack@redhat.com> - 78.13.0-1a /�- Update to 78.13.0 build1Q� _G Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�aA Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�~aU Eike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�}ao Eike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�|aA Eike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1 V �R��Z�m � V Y�aUEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�aoEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�aAEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�a3Eike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M� _?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1O� aAEike Rathke <erack@redhat.com> - 78.14.0-1a0��- Update to 78.14.0 build1O� aAEike Rathke <erack@redhat.com> - 78.13.0-2a �- Update to 78.13.0 build2O� aAEike Rathke <erack@redhat.com> - 78.13.0-1a /�- Update to 78.13.0 build1Q� _GJan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�aAEike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�aUEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release) A �Z�d�w. � � A B� GAJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B� GAJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�G}Jan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3F�GIJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesA�G?Jan Horak <jhorak@redhat.com>^�l@- Update to 68.8.0 build1W�mEMartin Stransky <stransky@redhat.com> - 68.7.0-3^��@- Added fix for rhbz#1821418L�]?Jan Horak <jhorak@redhat.com> - 68.7.0-2^�k@- Update to 68.7.0 build3O�aAEike Rathke <erack@redhat.com> - 78.14.0-1a0��- Update to 78.14.0 build1O�aAEike Rathke <erack@redhat.com> - 78.13.0-2a �- Update to 78.13.0 build2O�aAEike Rathke <erack@redhat.com> - 78.13.0-1a /�- Update to 78.13.0 build1Q�_GJan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�aAEike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1 h �m �u1��@ � � h A�)G?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�(]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�'GAJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�&GAJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�%G}Jan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3F�$GIJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesA�#G?Jan Horak <jhorak@redhat.com>^�l@- Update to 68.8.0 build1W�"mEMartin Stransky <stransky@redhat.com> - 68.7.0-3^��@- Added fix for rhbz#1821418L�!]?Jan Horak <jhorak@redhat.com> - 68.7.0-2^�k@- Update to 68.7.0 build3L� ]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A� G?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L� ]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1 & �h�{,��I � o & F�5GIJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesR�4Ceerack@redhat.com - 78.4.1-1_���- Update to 78.4.1 - Filtering nss/nspr libs��3]�'Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�2]AJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�1]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�0G?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�/]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�.GAJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�-GAJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�,G}Jan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3F�+GIJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesL�*]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2 _ �X��1�\ � _ B�@GAJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�?G}Jan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3R�>Ceerack@redhat.com - 78.4.1-1_���- Update to 78.4.1 - Filtering nss/nspr libs��=]�'Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�<]AJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�;]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�:G?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�9]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�8GAJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�7GAJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�6G}Jan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3 > �l(���z � � > L�L]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�KGAJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�JGAJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�IG}Jan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3L�H]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�GC1erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��F]�'Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�E]AJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�D]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�CG?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�B]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�AGAJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1 R �m �]��5 � � R M�X]AJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�W]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�VG?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�U]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�TGAJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�SGAJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1L�R]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�QC1erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��P]�'Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�O]AJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�N]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�MG?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1 & {@��]��6 � a & 8�dC1erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��c]�'Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�b]AJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�a]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�`G?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�_]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�^GAJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�]GAJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1L�\]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�[]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�ZC1erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��Y]�'Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading = �b ��;�f+ � � = M�p_?Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�o]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�n]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�mC1erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��l]�'Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�k]AJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�j]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�iG?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�h]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�gGAJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1L�f]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�e]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build1 H �l(���z+ � � H L�|]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�{G?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1M�z_?Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�y]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�x]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�wC1erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��v]�'Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�u]AJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�t]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�sG?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�r]?Jan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�qGAJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1 e �r+��V��: � � e D�& � 6d7bcceec43abb616cbffadcf76d1c208a4f658a0625d17e0b0315b3e5a4c252D�% � e063c651b9c19f3ff44c19dafd53594a57c6c58f609c5e0e419a4b724c4b5f87D�$ � 40f292198cfd1d640409908c391eac750a799c0007158bd95505cc00794862e8D�# � 3430976f8acda648d8659eecbc9ab33a1dcb14139a6206b64b25c7a1129d685eD�" � 49a94cfaa934548d43b739e469156d5cbf8467609c08c9d7583ecd18912a49b7D�! � 66d5ac31048d37a6a1e65da7b344292d028e8fbb82d4b9d710ab79080280254cD� � 98f19e1b800783ce86112ad1cabb55fccc84a4979bb77d07ffceab8d38da6f2aD� � 44600066daf3f3b57b9e269737e0b0dfcd410f3a524fbbd74aec3162d6f84f7cD� � 67cc5f25f8e6a42f9536eb9dbe7e22e3fab22c55d87d37db23cb90136913067eD� � 802ef81827f925a8e48e7eac8b4f0c0e44a7873cc15a96c696316840d6541191D� � c51cb2eba6f030cce0b81686cebf834e0aad1fb747875ef6fc8d06c6930fe18aD� � 2fe8803bf3b71fc183107689fe53ca7b40a655e57b4fc6531786f97143f55b5fD� � f455772710a92ccc156759199ca532b9536d567cda99884613c0d4ec6f35ed4c �+��R�b � M�]AJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�]?Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�G?Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1M�_?Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�_?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�_?Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L� ]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�C1erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��~]�'Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�}]AJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloading T {@��R�- � � T L�]? Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�]? Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�C1 erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��]�' Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�_?Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M� _?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M� _?Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L� ]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L� ]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18� C1erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��]�'Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading k �`�i�Y � k M� _? Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L� ]? Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�]? Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�C1 erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��]�' Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�_? Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�_? Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�_? Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1 B �`�i.��@ � � B [�)]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�(_? Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�'_? Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�&_? Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�%]? Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�$]? Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�#C1 erack@redhat.com - 78.4.1-1_���- Update to 78.4.1M�"_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�!_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[� ]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM� _? Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M� _? Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1 W �g��>��N � � W M�5_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�4_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�3]] Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�2_? Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�1_? Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�0_? Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�/]? Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�.]? Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�-C1 erack@redhat.com - 78.4.1-1_���- Update to 78.4.1M�,_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�+_? Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�*_1 Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1 > �%�C�o � � > L�?]? Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�>_1 Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�=_1 Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�<_? Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �;]�% Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�:_? Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��9]�A Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190M�8_? Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��7]�3 Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�6_? Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1 < �#�A�m � � < L�I]?!Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�H_1!Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�G_1!Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�F_?!Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �E]�%!Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�D_?!Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��C]�A!Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190M�B_?!Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��A]�3!Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667O�@aA Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1 ! � �H��f � s ! O�TaA"Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�SaA"Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�RaA"Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�Q]?"Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�P_1"Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�O_1"Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�N_?"Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �M]�%"Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�L_?"Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��K]�A"Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190O�JaA!Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1 # n �J�i � s # M�__?$Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2O�^aA#Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�]aA#Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�\aA#Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�[]?#Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�Z_1#Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�Y_1#Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�X_?#Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �W]�%#Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�V_?#Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��U]�A#Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 / |,��K��U � / � �j]�%%Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�i_?%Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2O�haA$Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�gaA$Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�faA$Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�eaA$Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�d]?$Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�c_1$Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�b_1$Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�a_?$Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �`]�%$Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315 ! �g �}+�� � j ! F�v_1&Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�u_1&Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�t_?&Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �s]�%&Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315O�raA%Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�qaA%Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�paA%Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�oaA%Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�n]?%Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�m_1%Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�l_1%Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�k_?%Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3 b �_ �i�C � � b L�]?'Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F� _1'Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�_1'Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�~_?'Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �}]�%'Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315O�|aA&Eike Rathke <erack@redhat.com> - 91.13.0-1b��@- Update to 91.13.0 build1O�{aA&Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�zaA&Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�yaA&Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�xaA&Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�w]?&Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1 e �r+��V��: � � e D�3 � 0b48a1dc6bd965ac5f800c44cf498da51c5fd0ec07bf16a07911d66f89932c4bD�2 � 078df219eb34b52cef5f93c17533da34f2eceaec30e85da8944716d38dfee196D�1 � 61eb1f5291daee31b9568e4897e13e2fa0260d850c62490f336ee5f55b31703bD�0 � f9138cc0c8bd84737691daa9f6f8f6914ee52bef60ec7862c2921c8d8743faa7D�/ � 42e22ddc4f5145c86fda06a008ba1415e8c40c3caa32ca21f81ce460fa3e2bf5D�. � d84e36f29bdfc3258ea945056512bc5478db08e97bee521c8debc13bb0e514b1D�- � 903e1d0ede27725fa4cc5c201b48de10f5cbd5f90594a9cb1c3a7e06037b2fe0D�, � 8c0eff6015d46baf10cb337069eb8d7100741d665dddd559e9e053509293cad7D�+ � 6d5b1649b1e98557b5173af9108f9a86fc71dcf1bec82baed2b16dc82c6491d4D�* � 91c597c3c15155bea7576d423bb897ce5644669e24f2b918fb694fe845700c49D�) � 524031feb4b382103cd67a6e7a15219524577b7af9ecf3f8b7e5ca443bb043aaD�( � c472916040722df81c63f7a4b84001545fcde6fe7ff88a7d90493dac79e09626D�' � 97afe94345fd3c005c2618f3f48fcbae76e8b91619f9bfe40ec51d70d2b90c75 ) �\ �f��O � � m ) A� G?(Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E� Y5(Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC� Y1(Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8Q� _G(Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO� aA(Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�aU(Eike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�ao(Eike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�aA'Eike Rathke <erack@redhat.com> - 91.13.0-1b��@- Update to 91.13.0 build1O�aA'Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�aA'Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�aA'Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�aA'Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1 ] �b��$�~8 � � ] L�]?)Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�G?)Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�Y5)Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�Y1)Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8Q�_G)Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�aA)Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�aU)Eike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�ao)Eike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8v�]�(Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�]?(Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�]?(Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1 N �8��L�q" � N X�#]W*Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�"]�*Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�!]?*Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L� ]?*Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A� G?*Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E� Y5*Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC� Y1*Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8Q� _G*Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�aA*Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1v�]�)Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�]?)Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1 " �^ �|8��! � v " Q�/_G,Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssM�._?+Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�-]W+Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�,]�+Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�+]?+Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�*]?+Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�)G?+Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�(Y5+Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�'Y1+Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8Q�&_G+Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�%aA+Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1M�$_?*Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1 : �r.���l � � : E�;Y5-Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�:Y1-Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8Q�9_G-Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssM�8_?,Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�7_?,Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�6]W,Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�5]�,Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�4]?,Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�3]?,Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�2G?,Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�1Y5,Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�0Y1,Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8 : �m �J��d � � : L�G]?.Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�F]?.Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�EG?.Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�DY5.Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�CY1.Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8M�B_?-Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�A_?-Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�@]W-Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�?]�-Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�>]?-Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�=]?-Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�<G?-Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1 S �,��<��j � S v�R]�/Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�Q]?/Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�P]?/Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�OG?/Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�NY5/Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�MY1/Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8M�L_?.Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1M�K_?.Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�J_?.Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�I]W.Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�H]�.Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503 C �U�f�C � � C ]�]]a0Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�\_?0Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�[_?0Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�Z]W0Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�Y]�0Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�X]?0Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�W]?0Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1M�V_?/Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1M�U_?/Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�T_?/Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�S]W/Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled. c �%��7�c � c ]�g]a1Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�f_?1Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�e_?1Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�d]W1Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�c]�1Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�b]?1Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�a]?1Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1M�`_?0Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��_]�30Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�^_?0Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1 � �%��5�� � � M�p_?2Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��o]�32Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�n_?2Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]�m]a2Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�l_?2Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�k_?2Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1M�j_?1Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��i]�31Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�h_?1Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1 n �J��J � o M�z_?3Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��y]�33Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�x_?3Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]�w]a3Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�v_?3Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�u_?3Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1M�t_?2Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �s]�%2Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�r_?2Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��q]�A2Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 o n �J��J � o M�_?4Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��]�34Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�_?4Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]� ]a4Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�_?4Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�~_?3Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �}]�%3Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�|_?3Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��{]�A3Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 e �r+��V��: � � e D�@ � c515fb742f9fbf6e205c91df3d75b991bc0e87b359f64d944d2e6930b0b37ce8D�? � 36e338a02697b1f86cb751a4d30e96bbb9a01a424dfe6f050474e28f832d3b2dD�> � 5c481b40303686e7be3e1c4fb48c29d0e1c8d41c8eec46b55771c7970af95954D�= � a2b22dc88f61d0fa6de4fcb62e090f383e630fc264c56ad005c9c508b1c0fcb2D�< � d247f05fd2f22a9dc59679f6c668b92c75b8f5beb481c99983a0b6d26d10bb08D�; � 2ba8ed563d8e7d31e393c915f3705b7c8c4c991ca337616916c90e4a14049411D�: � e65c76e2da0feca843e2f481d8447767d71a1f723ceeca4f9720896b896a6e7eD�9 � a40300c549d06a08cce3881d68a82db4bbd0d600667f58fd2017f98bd033fa4eD�8 � e3fe1238b3aefa061d1f4c2e420e93639cafe3a21ce171d5f4a80fbe6aa7e555D�7 � c448f7707d3e7d90b0f7376b9e91d551448d8304a6b162d474c8cf243b7f11e5D�6 � 34f10adeaa6be7f713c3b688736291759f254661968bf607fab161503364705fD�5 � 48c754619fa5b6636c02b2b5d79f0529027a96e638760d84ff74df57ece87bd2D�4 � 5a169173d476ff530595d0ae6b03d7f7fba5bf999d95a008a477896efb71218d & n �J�Q v & M� _?5Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1�� ]�35Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M� _?5Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]� ]a5Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M� _?5Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1F�_14Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�_?4Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �]�%4Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�_?4Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��]�A4Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 v n �J�Q � v M�_?6Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��]�36Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�_?6Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]�]a6Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.F�_15Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�_?5Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �]�%5Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�_?5Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��]�A5Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 - n �J�X } - M� _?7Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1�� ]�37Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M� _?7Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]� ]a7Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.F� _16Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�_16Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�_?6Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �]�%6Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�_?6Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��]�A6Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 � n �J�h � � M�)_?8Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��(]�38Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�'_?8Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1F�&_17Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�%_17Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�$_?7Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �#]�%7Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�"_?7Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��!]�A7Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 > n �J�i � > M�3_?9Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��2]�39Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�1_?9Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1L�0]?8Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�/_18Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�._18Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�-_?8Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �,]�%8Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�+_?8Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��*]�A8Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 ) n �J�i ) �<�;a�:Eric Garver <egarver@redhat.com> - 0.6.3-3]>�- backport recent upstream stable fixes - backport fix --remove-rules deleting all direct rules - backport fix unable to delete rich rule forward-port - backport fix forward-port for external zone hijacking internal zone - backport fix testsuite iptables lockingL�:]?9Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�9_19Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�8_19Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�7_?9Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �6]�%9Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�5_?9Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��4]�A9Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 �$�@�o � } `�Dca:Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�Ccc:Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �Bc�3:Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh�Aas:Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�@ai:Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�?a{:Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�>a�:Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�=ak:Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�<a�:Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name �$�@�o � } `�Mca;Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�Lcc;Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �Kc�3;Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh�Jas;Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�Iai;Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�Ha{;Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�Ga�;Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�Fak;Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�Ea�;Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name ) �O�s � � ) c�Tai<Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�Sa{<Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�Ra�<Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�Qak<Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�Pa�<Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name�<�Oa�<Eric Garver <egarver@redhat.com> - 0.6.3-3]>�- backport recent upstream stable fixes - backport fix --remove-rules deleting all direct rules - backport fix unable to delete rich rule forward-port - backport fix forward-port for external zone hijacking internal zone - backport fix testsuite iptables lockingn�Nc};Eric Garver <egarver@redhat.com> - 0.6.3-13`x*�- doc: clarify --set-target values "default" vs "reject" ��@�d � � c�]ai=Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�\a{=Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�[a�=Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�Zak=Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�Ya�=Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name`�Xca<Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�Wcc<Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �Vc�3<Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh�Uas<Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zone ��@� � r�da�>Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name�<�ca�>Eric Garver <egarver@redhat.com> - 0.6.3-3]>�- backport recent upstream stable fixes - backport fix --remove-rules deleting all direct rules - backport fix unable to delete rich rule forward-port - backport fix forward-port for external zone hijacking internal zone - backport fix testsuite iptables lockingn�bc}=Eric Garver <egarver@redhat.com> - 0.6.3-13`x*�- doc: clarify --set-target values "default" vs "reject"`�aca=Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�`cc=Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �_c�3=Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh�^as=Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zone �$�O�V � � r�ma�?Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name`�lca>Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�kcc>Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �jc�3>Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh�ias>Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�hai>Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�ga{>Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�fa�>Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�eak>Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-config �$�O�V � � n�vc}?Eric Garver <egarver@redhat.com> - 0.6.3-13`x*�- doc: clarify --set-target values "default" vs "reject"`�uca?Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�tcc?Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �sc�3?Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh�ras?Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�qai?Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�pa{?Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�oa�?Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�nak?Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-config / �K�o � / h�}as@Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�|ai@Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�{a{@Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�za�@Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�yak@Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�xa�@Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name�<�wa�@Eric Garver <egarver@redhat.com> - 0.6.3-3]>�- backport recent upstream stable fixes - backport fix --remove-rules deleting all direct rules - backport fix unable to delete rich rule forward-port - backport fix forward-port for external zone hijacking internal zone - backport fix testsuite iptables locking r�6�Z � � h�asAEric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�aiAEric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�a{AEric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�a�AEric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�akAEric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�a�AEric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name`� ca@Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�cc@Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �~c�3@Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square brackets e �r+��V��: � � e D�M � 1e46d6b60429dbed54c038855d87f27518fd4c4f7f6e66a15ff60a3bda266f78D�L � c3bdafdc7b5df1eae10ff90840698573957b8409268bf2a94cf0a31564d3658cD�K � 1979501bae62e6070c0c6037b5547a69c4342485df1f9dd821ad18a174b0bd48D�J � 85ac0468355fd6847c79849e947fd3b5d88f606ad3aa6fd06cb4aca3fe3c9fc8D�I � 031f000698ae93b4d5d19e31521dddc308fa90b6dfee2faed3b23620d47fd150D�H � 91d045022efb0cd2e147b359f329cbd083f5efa2e778b5a35adf22874dba15e2D�G � aeadded2fd899332eca7c3d0d69c10f06ba09b988bbb0be751dfc6ea05b1a753D�F � 724795eec6065da1df593d22a6a359fc5b241aec5a3916cbec646ff78f2196baD�E � f19ae45fcb7a758368a349bdd8244b1029ea8e22cd16b83c2fd74bcfa32253b6D�D � 84fb40705d6f0704a0543373e2e266ea3565b3125d70e1cf4d3a2ef8497670a0D�C � ac621916b414525cdb8e9a02b622a0b85c0f539979311abe60541cc0da534032D�B � 0e230546571aa26c06f1097967584ab4b9e777e7ca6c94d45f8706a36bdccc22D�A � 4706b7d5da4cf50b5e9a1e2b512bf1746aac5d7ff7525f047e6a79a392d7f548 f r�:��' � f a�[kBDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�[]BDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f� [uBDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R� cEBKalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R� cEBKalev Lember <klember@redhat.com> - 1.0.1-1[���- Update to 1.0.1 (#1570030)n� c}AEric Garver <egarver@redhat.com> - 0.6.3-13`x*�- doc: clarify --set-target values "default" vs "reject"`� caAEric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�ccAEric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �c�3AEric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square brackets V �J��0�r � V X�[YCDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�[kCDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�[]CDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�[uCDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�cECKalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�]KBDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�c{BKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�cEBKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�[YBDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�[YBDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435) V �P��6�p � V X�#[YDDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�"[YDDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�![kDDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z� []DDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f� [uDDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R� ]KCDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R� ]KCDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m� c{CKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�cECKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�[YCDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652) g �;��3�r � g R�-cEEKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�,[YEDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�+[YEDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�*[kEDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�)[]EDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)[�(oKDDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R�']KDDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�&]KDDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�%c{DKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�$cEDKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591) f �;��:��' � f a�7[kFDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�6[]FDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�5[uFDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�4cEFKalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�3cEFKalev Lember <klember@redhat.com> - 1.0.1-1[���- Update to 1.0.1 (#1570030)K�2e5EKalev Lember <klember@redhat.com> - 1.0.9-13fb�@- Fix CVE-2024-32462[�1oKEDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R�0]KEDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�/]KEDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�.c{EKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340 V �J��0�r � V X�A[YGDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�@[kGDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�?[]GDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�>[uGDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�=cEGKalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�<]KFDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�;c{FKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�:cEFKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�9[YFDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�8[YFDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435) V �P��6�p � V X�K[YHDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�J[YHDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�I[kHDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�H[]HDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�G[uHDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�F]KGDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�E]KGDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�Dc{GKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�CcEGKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�B[YGDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652) g �;��3�r � g R�UcEIKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�T[YIDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�S[YIDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�R[kIDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�Q[]IDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)[�PoKHDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R�O]KHDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�N]KHDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�Mc{HKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�LcEHKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591) f �;��:��' � f a�_[kJDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�^[]JDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�][uJDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�\cEJKalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�[cEJKalev Lember <klember@redhat.com> - 1.0.1-1[���- Update to 1.0.1 (#1570030)K�Ze5IKalev Lember <klember@redhat.com> - 1.0.9-13fb�@- Fix CVE-2024-32462[�YoKIDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R�X]KIDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�W]KIDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�Vc{IKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340 V �J��0�r � V X�i[YKDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�h[kKDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�g[]KDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�f[uKDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�ecEKKalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�d]KJDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�cc{JKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�bcEJKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�a[YJDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�`[YJDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435) V �P��6�p � V X�s[YLDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�r[YLDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�q[kLDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�p[]LDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�o[uLDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�n]KKDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�m]KKDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�lc{KKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�kcEKKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�j[YKDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652) g �;��3�r � g R�}cEMKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�|[YMDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�{[YMDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�z[kMDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�y[]MDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)[�xoKLDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R�w]KLDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�v]KLDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�uc{LKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�tcELKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591) f �;��:��' � f a�[kNDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�[]NDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�[uNDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�cENKalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�cENKalev Lember <klember@redhat.com> - 1.0.1-1[���- Update to 1.0.1 (#1570030)K�e5MKalev Lember <klember@redhat.com> - 1.0.9-13fb�@- Fix CVE-2024-32462[�oKMDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R� ]KMDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�]KMDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�~c{MKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340 e �r+��V��: � � e D�Z � f44cd6beef0e0285e87ceddb589f3ce6b36f4340a280ed674cc37aa7141b8397D�Y � ef82a93c26a7db64bb635cb373e0bf00ab1038b8e42c02b37a970cc41e97ef34D�X � c2b79101f730ccfa892ffdfdb7ce4d806f9960bc302581dc10991c7321dd4e24D�W � 1e843fde687553231eecf687163be424f4d2df8b4398e28a34c6dff791e1b161D�V � f61c338504f42e88dbef95a448e0e1aa1c04a89586134610472f384c31966981D�U � 7ea68138245e021dc4dbaf9e1b990e5250e1b72ebca41352896a1b5dbceda2fbD�T � 4b031b0a3b505796cae1f7221a96821c6c953c4e2f94f8869bfc2a6139af8b2aD�S � cddc3744f22b625662ab15986f90fc202f14ece03ac5fce4fbde2d656b5f38ddD�R � 5cd33852a9e9061d05228552a9fa6fe6b3b0667fc738828b9df7e633dbe46bd5D�Q � a300fb68037da47d07903271c1b04a1bf9b9ce2da5c1a0e56fcede7f6614fa62D�P � ddd64d000d677447dbb3a66637d5f9d9064439fbdd584fdad1f5aea0b47ef550D�O � e251fe0d7ffbb8b51c6644310756c5ea0a0ea8d5282cb0ecda819c8ff161dfecD�N � 6a5560cf575ee9bfa9cac85044e94e3bce3ea85e26431c99e41877289cf82b64 V �J��0�r � V X�[YODavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�[kODavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�[]ODavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�[uODavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R� cEOKalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R� ]KNDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m� c{NKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R� cENKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X� [YNDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�[YNDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435) of Iflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��T ��_ ��j ��v �� �� �� ��# ��/ ��; ��G ��R ��] ��g ��p ��z �� �� �� �� ��) ��3 ��; ��D ��M ��T ��] ��d ��m ��v ��} �� �� �� ��# ��- ��7 ��A ��K ��U ��_ ��i ��s ��} �� � � �% �/ �8 �A �J �S �[ �d �m �v � � � � � �' �. �5 �< �C �K �S �Z �a �i �r �{ � � "� #� $�% %�- &�5 '�= (�D *�L +�T ,�] -�e .�n /�r 1�t 2�x 3�| 5�~ 6� 7� 8� 9� :� ;� <� =� >�$ ?�( @�+ A�0 B�4 C�8 D�< F�? G�D H�H V �P��6�p � V X�[YPDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�[YPDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�[kPDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�[]PDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�[uPDavid King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�]KODavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�]KODavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�c{OKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�cEOKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�[YODavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652) g �;��3�r � g R�%cEQKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�$[YQDavid King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�#[YQDavid King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�"[kQDavid King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�![]QDavid King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)[� oKPDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R� ]KPDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R� ]KPDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m� c{PKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R� cEPKalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591) 8 �;��:��# � 8 M�/_?RDaniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27��.��RFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�-Y_RAdam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops�,Y�RAdam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�+Y-RAdam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BRK�*e5QKalev Lember <klember@redhat.com> - 1.0.9-13fb�@- Fix CVE-2024-32462[�)oKQDebarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R�(]KQDavid King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�']KQDavid King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�&c{QKalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340 �F�K�� � ��8��SFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�7Y_SAdam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops�6Y�SAdam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�5Y-SAdam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�4c�RJan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��3c�MRJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�2c[RJan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�1_?RDaniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�0coRPetr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7 f �F���}9 � f Z�AY_TAdam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops�@Y�TAdam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�?Y-TAdam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�>c�SJan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��=c�MSJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�<c[SJan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�;_?SDaniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�:coSPetr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�9_?SDaniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27 ( e�[�` � � ( s�JY�UAdam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�IY-UAdam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�Hc�TJan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��Gc�MTJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�Fc[TJan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�E_?TDaniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�DcoTPetr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�C_?TDaniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27��B��TFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild A ��N�� � A A�SY-VAdam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�Rc�UJan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��Qc�MUJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�Pc[UJan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�O_?UDaniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�NcoUPetr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�M_?UDaniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27��L��UFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�KY_UAdam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drop � �-�B��( � ��[c�MVJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�Zc[VJan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�Y_?VDaniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�XcoVPetr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�W_?VDaniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27��V��VFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�UY_VAdam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops�TY�VAdam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026) f �>�k�� � f ]�dc[WJan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�c_?WDaniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�bcoWPetr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�a_?WDaniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27��`��WFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�_Y_WAdam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops�^Y�WAdam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�]Y-WAdam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�\c�VJan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819 + e��-�5 � { + M�m_?XDaniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�lcoXPetr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�k_?XDaniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27��j��XFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�iY_XAdam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops�hY�XAdam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�gY-XAdam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�fc�WJan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��ec�MWJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482 7 ��F�K � � 7 L�v]?YDaniel Mach <dmach@redhat.com> - 4.0.9-6R�U�- Mass rebuild 2014-01-24L�u]?YDaniel Mach <dmach@redhat.com> - 4.0.9-5R�k�- Mass rebuild 2013-12-27s�te�YJiri Popelka <jpopelka@redhat.com> - 4.0.9-4R���- Correct Obsoletes/Provides printer-filters (bug #1035450)|�s[� YTim Waugh <twaugh@redhat.com> - 4.0.9-3Q��@- Obsolete/provide printer-filters package now it has gone (bug #967316).y�rk� YTom Callaway <spot@fedoraproject.org> - 4.0.9-2Q��@- remove Artistic test scripts from source tarball (bz 967406)>�qeYJiri Popelka <jpopelka@redhat.com> - 4.0.9-1Q?�- 4.0.9{�pc�XJan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��oc�MXJan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�nc[XJan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora) * �:�+�n � y * L�]?ZDaniel Mach <dmach@redhat.com> - 4.0.9-5R�k�- Mass rebuild 2013-12-27s�~e�ZJiri Popelka <jpopelka@redhat.com> - 4.0.9-4R���- Correct Obsoletes/Provides printer-filters (bug #1035450)|�}[� ZTim Waugh <twaugh@redhat.com> - 4.0.9-3Q��@- Obsolete/provide printer-filters package now it has gone (bug #967316).y�|k� ZTom Callaway <spot@fedoraproject.org> - 4.0.9-2Q��@- remove Artistic test scripts from source tarball (bz 967406)>�{eZJiri Popelka <jpopelka@redhat.com> - 4.0.9-1Q?�- 4.0.9��zg�)YZdenek Dohnal <zdohnal@redhat.com> - 4.0.9-10_� �- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files� �ye� YZdenek Dohnal <zdohnal@redhat.com> - 4.0.9-9\�@- 1707559 - removal of option in ghostscript caused foomatic-rip to failk�x[YTim Waugh <twaugh@redhat.com> - 4.0.9-8S��- Put some text into foomatic-preferred-drivers man page.U�w[SYTim Waugh <twaugh@redhat.com> - 4.0.9-7S��@- Ship more manpages (bug #948965). F �Y�g�[ � F W�eM[Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�_c[Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V�_Q[Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~�_� [Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)��g�)ZZdenek Dohnal <zdohnal@redhat.com> - 4.0.9-10_� �- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files� �e� ZZdenek Dohnal <zdohnal@redhat.com> - 4.0.9-9\�@- 1707559 - removal of option in ghostscript caused foomatic-rip to failk�[ZTim Waugh <twaugh@redhat.com> - 4.0.9-8S��- Put some text into foomatic-preferred-drivers man page.U�[SZTim Waugh <twaugh@redhat.com> - 4.0.9-7S��@- Ship more manpages (bug #948965).L� ]?ZDaniel Mach <dmach@redhat.com> - 4.0.9-6R�U�- Mass rebuild 2014-01-24 e �r+��V��: � � e D�g � d2c7c9daa4378bb677e4fa893b6839ebef8009ea1e132569083c4a845ec60a22D�f � 779af39181edc4bdb4e091b266ec46176447a4ccc0941c928f999ed3fa780cacD�e � bb549c96d2986def32a70c8f766e2a23ac2dd2f4c76e72e116fdc699bd0c6eb9D�d � 5dfc9505dc8c10ee2fa6b344d1a86a8ea57d43b15353225888d1f9888a840220D�c � 8c8b857999a32f70ec103af37b684d4c2eb482a3f8d75f62cec86acb6c10e940D�b � 530c5e0227cf705a60da80a809db414020ef88b26923ed6828fe285d4f1b5e18D�a � 564e997b9c790bd2ccb1bc895a8ace373c5af426e771063ebc24eb3ac892b979D�` � b06da13bab5aee0690c6d98073ecafe702d73f53e8e1b9421e90fe7928ba1d17D�_ � 1ca99a830f21e3f243a3f20099285c28e83738059736b8931da396f1b77e1b0aD�^ � b884e513e4fabc67d102225daf07a6948f3c7aba4eea99292cf5bbaa993d41e7D�] � 5496c1582c68c5314603d320dbb44e5435532564f1a4c6068e8040f2767a1797D�\ � 7b4f34148e411ba03bffe54c35102df45b1e78e1ed461d8ba62a118f517e96d9D�[ � a4f2dc5f488dc7bd53211931528d9c122391fbf1997e99e33a04a33c38c67995 B ��D�[ � B ~�_� \Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)��g�C[Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf� gi[Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}� g�[Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O� ]E[Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|� e�[Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g� em[Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199) F �E���/ � F f�gi\Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}�g�\Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O�]E\Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|�e�\Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g�em\Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W�eM\Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�_c\Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V�_Q\Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811) h h��,�h h �|� e�]Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g� em]Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W� eM]Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�_c]Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V�_Q]Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~�_� ]Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)��g�C\Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscan - �.�-�S � � - g�'em^Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W�&eM^Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�%_c^Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V�$_Q^Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~�#_� ^Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)��"g�C]Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf�!gi]Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}� g�]Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O� ]E]Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286) S �.�- � S V�._Q_Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~�-_� _Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)��,g�C^Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf�+gi^Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}�*g�^Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O�)]E^Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|�(e�^Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623) � �D��� � f�5gi_Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}�4g�_Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O�3]E_Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|�2e�_Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g�1em_Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W�0eM_Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�/_c_Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041) y h�P�V � y |�<]� `Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�;eU`Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�:c{`Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141��9c�+`Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z�8c�`Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141��7c�M`Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268��6g�C_Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscan i �� p � i ��Cc�+aMarek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z�Bc�aMarek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141��Ac�MaMarek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268��@m�;`Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j�?]{`Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��>]�1`Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�=]o`Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504 # �2�L�U � # ��Kc�MbMarek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268��Jm�;aMarek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j�I]{aMarek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��H]�1aMarek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�G]oaMarek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|�F]� aMarek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�EeUaRichard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�Dc{aMarek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141 N ���+�E � N j�S]{bMarek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��R]�1bMarek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�Q]obMarek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|�P]� bMarek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�OeUbRichard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�Nc{bMarek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141��Mc�+bMarek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z�Lc�bMarek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141 z i�Q�W � z |�Z]� cMarek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�YeUcRichard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�Xc{cMarek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141��Wc�+cMarek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z�Vc�cMarek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141��Uc�McMarek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268��Tm�;bMarek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635 i �� p � i ��ac�+dMarek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z�`c�dMarek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141��_c�MdMarek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268��^m�;cMarek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j�]]{cMarek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��\]�1cMarek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�[]ocMarek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504 " �2�L�U � " ��i� �eFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild��hm�;dMarek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j�g]{dMarek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��f]�1dMarek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�e]odMarek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|�d]� dMarek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�ceUdRichard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�bc{dMarek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141 V��b � � �re�]eFilip Januš <fjanus@redhat.com> - 2.0.35-27_���- Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8N�qa?eDaniel Mach <dmach@redhat.com> - 2.0.35-26R�U�- Mass rebuild 2014-01-24N�pa?eDaniel Mach <dmach@redhat.com> - 2.0.35-25R�k�- Mass rebuild 2013-12-27L�oc9eHonza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T�ncIeHonza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity��m� �eFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\�l]_eAdam Tkac <atkac redhat com> - 2.0.35-21P�9@- rebuild due to "jpeg8-ABI" feature dropP�k]GeAdam Tkac <atkac redhat com> - 2.0.35-20P�O@- rebuild against new libjpeg�&�jc�keHonza Horak <hhorak@redhat.com> - 2.0.35-19P<��- Spec file cleanup - Compile and run test suite during build - Using chrpath to get rid of --rpath in gd-progs $ d�gl � u $ N�{a?fDaniel Mach <dmach@redhat.com> - 2.0.35-26R�U�- Mass rebuild 2014-01-24N�za?fDaniel Mach <dmach@redhat.com> - 2.0.35-25R�k�- Mass rebuild 2013-12-27L�yc9fHonza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T�xcIfHonza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity��w� �fFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\�v]_fAdam Tkac <atkac redhat com> - 2.0.35-21P�9@- rebuild due to "jpeg8-ABI" feature dropP�u]GfAdam Tkac <atkac redhat com> - 2.0.35-20P�O@- rebuild against new libjpeg�&�tc�kfHonza Horak <hhorak@redhat.com> - 2.0.35-19P<��- Spec file cleanup - Compile and run test suite during build - Using chrpath to get rid of --rpath in gd-progs��s� �fFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild " \��d � q " L�c9gHonza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T�cIgHonza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity��� �gFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\� ]_gAdam Tkac <atkac redhat com> - 2.0.35-21P�9@- rebuild due to "jpeg8-ABI" feature dropP�]GgAdam Tkac <atkac redhat com> - 2.0.35-20P�O@- rebuild against new libjpeg�&�~c�kgHonza Horak <hhorak@redhat.com> - 2.0.35-19P<��- Spec file cleanup - Compile and run test suite during build - Using chrpath to get rid of --rpath in gd-progs��}� �gFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� �|e�]fFilip Januš <fjanus@redhat.com> - 2.0.35-27_���- Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8 & �^� t! � & �� � �hFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\� ]_hAdam Tkac <atkac redhat com> - 2.0.35-21P�9@- rebuild due to "jpeg8-ABI" feature dropP� ]GhAdam Tkac <atkac redhat com> - 2.0.35-20P�O@- rebuild against new libjpeg�&�c�khHonza Horak <hhorak@redhat.com> - 2.0.35-19P<��- Spec file cleanup - Compile and run test suite during build - Using chrpath to get rid of --rpath in gd-progs��� �hFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� �e�]gFilip Januš <fjanus@redhat.com> - 2.0.35-27_���- Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8N�a?gDaniel Mach <dmach@redhat.com> - 2.0.35-26R�U�- Mass rebuild 2014-01-24N�a?gDaniel Mach <dmach@redhat.com> - 2.0.35-25R�k�- Mass rebuild 2013-12-27 e �r+��V��: � � e D�t � 570aef75009a72d1f785eeeb0cf1e9b1c5113c73c46a3a7c2eebe0f87a44655bD�s � bb408fa95bcf415eb2f22a47b9881db4b7939785d83fa16655c8dc2709c0e454D�r � 076ae5a31f58ce2e33f04de674fed5086fd8f72a8e802528d833f3033c017469D�q � 9a97f6e2d20a2e98ad20844706c47bf2fc689c6975c67067aa46d4ab03c1e47aD�p � b3523f6bd479abca1bc4c70f870af2423e9747ad2cb185692334588138742f50D�o � 0debd7af9974202b568d8b8c1c87e8d70139dd2dbc62ba9bf7a9e72fe64c3990D�n � d0b3530450134364f48fc2529fb28b6ba4924562e2743be8a4a9531df24ce934D�m � d9df089dfd6da09a0d335f5f7217eb49fb786af4bc6bdc86f8f5780e9588cb54D�l � aa4d5c25ee0ab0c6200041d7babcc2186123b17af2126662b27bed0013787faaD�k � eba7c5a667e7db88684d709d6c7106aa972e55a41d27a79736afb8d0eec1de6dD�j � a4c7433fc835c54d8bf366a26b4dc41534ab33b1bd9437ea1ba37c1150958611D�i � 3e01c37b17dac632211d855274ca843a3926cde218387315d5124f7b90008656D�h � 8c0250c573335738373e9064ccc227bb57bf3a3ce5d859aa2fe9f129bbc28592 �Z �x � { \�]_iAdam Tkac <atkac redhat com> - 2.0.35-21P�9@- rebuild due to "jpeg8-ABI" feature dropP�]GiAdam Tkac <atkac redhat com> - 2.0.35-20P�O@- rebuild against new libjpeg�&�c�kiHonza Horak <hhorak@redhat.com> - 2.0.35-19P<��- Spec file cleanup - Compile and run test suite during build - Using chrpath to get rid of --rpath in gd-progs��� �iFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� �e�]hFilip Januš <fjanus@redhat.com> - 2.0.35-27_���- Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8N�a?hDaniel Mach <dmach@redhat.com> - 2.0.35-26R�U�- Mass rebuild 2014-01-24N�a?hDaniel Mach <dmach@redhat.com> - 2.0.35-25R�k�- Mass rebuild 2013-12-27L� c9hHonza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T� cIhHonza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity ! d �m x � ! {� c�jRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`� _ejRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�c�jRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143� �e�]iFilip Januš <fjanus@redhat.com> - 2.0.35-27_���- Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8N�a?iDaniel Mach <dmach@redhat.com> - 2.0.35-26R�U�- Mass rebuild 2014-01-24N�a?iDaniel Mach <dmach@redhat.com> - 2.0.35-25R�k�- Mass rebuild 2013-12-27L�c9iHonza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T�cIiHonza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity��� �iFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild t �'�3�R � t s�%c�mRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143e�$cklRay Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063{�#c�lRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�"_elRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�!c�lRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143{� c�kRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`� _ekRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s� c�kRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143 � � �A�` � � `�-_eoRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�,c�oRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143{�+c�nRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�*_enRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�)c�nRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143e�(ckmRay Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063{�'c�mRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�&_emRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583 l � �+�M � l {�5c�qRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�4_eqRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�3c�qRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143e�2ckpRay Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063{�1c�pRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�0_epRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�/c�pRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143{�.c�oRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821 t �"�A�h � t s�=c�tRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143{�<c�sRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�;_esRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�:c�sRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143{�9c�rRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�8_erRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�7c�rRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143e�6ckqRay Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063 � � �A�` � e�DckuRay Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063{�Cc�uRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�B_euRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�Ac�uRay Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143e�@cktRay Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063{�?c�tRay Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�>_etRay Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583 e �r+��V��: � � e D� � 3e669a493af1a126cce0a77eecae0864765c9b701b5640962ecfa5a8ec1afc30D� � 36fed680eaa8454cb71901db4b5393c54c16fdfc72c0901bc461231559e164efD� � 48db0a9dafc6ecf4c0b955075d04ff198a44fa5b1bdea37a0f03af3d9d75e1a6D�~ � 5268af6fbc32bf7411d9d0df3379c86428de9b0d25cbcbd8a6f1703caac79829D�} � d977ef2c9e09f15898d44de8446c4e0984f357c637fa6b2194f05cf87e8abc29D�| � c4a681b60727112a37ddcabfef6cfcafd36496fa1748cd9e419ad0d579eeb740D�{ � 3b2af1cbe29d541a936e2a76af8f1cc07780ea069f8cc04404f4b2f85184abfcD�z � b3306affa940e0e2ab3cd9caec8dda837e626fe8043ec669f8465d62b7b08ed5D�y � c0c2b524cce50372b06ea8c7a4618f02d379ce6a9cbf9b2a7bbd6e21c4a80dd7D�x � 666bdeb5237f9bac4020a4b5da35bdc2b27ec3fe6d28b4e3823d1ad165c013b5D�w � 73e2cf9bb12255322e5252ec0b918e3e62d5c6df5b610dd7d2ecf351b34f1365D�v � 0f6e2c2f22024dd4f9db5cb729bdd2f2744882ba37e965a50b954f861c99243bD�u � 9b205c9658e9caf5ecd6d928179b7e7b36aa629b18e33540805f21a0d0b9f939 l x�x � l M�L_?vDaniel Mach <dmach@redhat.com> - 0.2.0-18R�U�- Mass rebuild 2014-01-24M�K_?vDaniel Mach <dmach@redhat.com> - 0.2.0-17R�k�- Mass rebuild 2013-12-27i�JeqvNils Philippsen <nils@redhat.com> - 0.2.0-16R�@- remove BR: w3m, it's only needed for "make dist"M�Io/vRex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R��- rebuild (exiv2)O�Ho3vRex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R��- rebuild (openexr)[�GkOvKalev Lember <kalevlember@gmail.com> - 0.2.0-13R1��- Rebuilt for ilmbase soname bump��F��vFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�i�Ee�ovNils Philippsen <nils@redhat.com> - 0.2.0-11Q�o@- replace lua-5.2 patch by upstream commit - fix buffer overflow in and add plausibility checks to ppm-load op (CVE-2012-4433) - fix multi-lib issue in generated documentation [ �Ob�i � [ i�TeqwNils Philippsen <nils@redhat.com> - 0.2.0-16R�@- remove BR: w3m, it's only needed for "make dist"M�So/wRex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R��- rebuild (exiv2)O�Ro3wRex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R��- rebuild (openexr)[�QkOwKalev Lember <kalevlember@gmail.com> - 0.2.0-13R1��- Rebuilt for ilmbase soname bump��P��wFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�i�Oe�owNils Philippsen <nils@redhat.com> - 0.2.0-11Q�o@- replace lua-5.2 patch by upstream commit - fix buffer overflow in and add plausibility checks to ppm-load op (CVE-2012-4433) - fix multi-lib issue in generated documentationV�NeKvJosef Ridky <jridky@redhat.com> - 0.2.0-19.1a�q@- fix CVE-2021-45463 (#2035416)U�MaMvJosef Ridky <jridky@redhat.com> - 0.2.0-19X@�- add Requires: dcraw (#1279144) ' �`��' � w ' M�]o/xRex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R��- rebuild (exiv2)O�\o3xRex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R��- rebuild (openexr)[�[kOxKalev Lember <kalevlember@gmail.com> - 0.2.0-13R1��- Rebuilt for ilmbase soname bump��Z��xFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�i�Ye�oxNils Philippsen <nils@redhat.com> - 0.2.0-11Q�o@- replace lua-5.2 patch by upstream commit - fix buffer overflow in and add plausibility checks to ppm-load op (CVE-2012-4433) - fix multi-lib issue in generated documentationV�XeKwJosef Ridky <jridky@redhat.com> - 0.2.0-19.1a�q@- fix CVE-2021-45463 (#2035416)U�WaMwJosef Ridky <jridky@redhat.com> - 0.2.0-19X@�- add Requires: dcraw (#1279144)M�V_?wDaniel Mach <dmach@redhat.com> - 0.2.0-18R�U�- Mass rebuild 2014-01-24M�U_?wDaniel Mach <dmach@redhat.com> - 0.2.0-17R�k�- Mass rebuild 2013-12-27 ] �D��CV � ] [�ekOyKalev Lember <kalevlember@gmail.com> - 0.2.0-13R1��- Rebuilt for ilmbase soname bump��d��yFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�i�ce�oyNils Philippsen <nils@redhat.com> - 0.2.0-11Q�o@- replace lua-5.2 patch by upstream commit - fix buffer overflow in and add plausibility checks to ppm-load op (CVE-2012-4433) - fix multi-lib issue in generated documentationV�beKxJosef Ridky <jridky@redhat.com> - 0.2.0-19.1a�q@- fix CVE-2021-45463 (#2035416)U�aaMxJosef Ridky <jridky@redhat.com> - 0.2.0-19X@�- add Requires: dcraw (#1279144)M�`_?xDaniel Mach <dmach@redhat.com> - 0.2.0-18R�U�- Mass rebuild 2014-01-24M�__?xDaniel Mach <dmach@redhat.com> - 0.2.0-17R�k�- Mass rebuild 2013-12-27i�^eqxNils Philippsen <nils@redhat.com> - 0.2.0-16R�@- remove BR: w3m, it's only needed for "make dist" 2 �^��R�� � 2 ��n� �zFedora Release Engineering <releng@fedoraproject.org> - 2.2.2-2V��- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild�X�ma�QzPaul Howarth <paul@city-fan.org> - 2.2.2-1V��- Update to 2.2.2 - geoipupdate now calls fsync on the database directory after a rename to make it durable in the event of a crash - Update autotools patchV�leKyJosef Ridky <jridky@redhat.com> - 0.2.0-19.1a�q@- fix CVE-2021-45463 (#2035416)U�kaMyJosef Ridky <jridky@redhat.com> - 0.2.0-19X@�- add Requires: dcraw (#1279144)M�j_?yDaniel Mach <dmach@redhat.com> - 0.2.0-18R�U�- Mass rebuild 2014-01-24M�i_?yDaniel Mach <dmach@redhat.com> - 0.2.0-17R�k�- Mass rebuild 2013-12-27i�heqyNils Philippsen <nils@redhat.com> - 0.2.0-16R�@- remove BR: w3m, it's only needed for "make dist"M�go/yRex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R��- rebuild (exiv2)O�fo3yRex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R��- rebuild (openexr) � � � ��r� �zFedora Release Engineering <releng@fedoraproject.org> - 2.4.0-2Yx�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild�'�qa�ozPaul Howarth <paul@city-fan.org> - 2.4.0-1Y(�- Update to 2.4.0 - geoipupdate now checks that 0��p� �zFedora Release Engineering <releng@fedoraproject.org> - 2.3.1-2X��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild�^�oa�]zPaul Howarth <paul@city-fan.org> - 2.3.1-1Xn5@- Update to 2.3.1 - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or greater - Previously, on an invalid gzip file, geoipupdate would output binary data to stderr; it now displays an appropriate error message - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33) - $(sysconfdir) is now created if it doesn't exist (GH#33) - The sample config file is now usable (GH#33) the database directory is writable: if it is not, it reports the problem and aborts - geoipupdate now acquires a lock when starting up to ensure only one instance may run at a time: a new option, 'LockFile', exists to set the file to use as a lock ('.geoipupdate.lock' in the database directory by default) - geoipupdate now prints out additional information from the server when a download request results in something other than HTTP status 2xx; this provides more information when the API does not respond with a database file - ${datarootdir}/GeoIP is now created on 'make install' (GH#29) - Previously, a variable named 'ERROR' was used, which caused issues building on Windows (GH#36) - Drop EL-5 support - Drop BuildRoot: and Group: tags - Drop explicit buildroot cleaning in %install section - Drop explicit %clean section - noarch subpackages always available now - libcurl-devel always available now " d " �>�ta� zPaul Howarth <paul@city-fan.org> - 2.5.0-1Y�e�- Update to 2.5.0 - Replace use of strnlen() due to lack of universal availability (GH#71) - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64) - Remove unused base64 library (GH#68) - Add the new configuration option 'PreserveFileTimes'; if set, the downloaded files will get the same modification times as their original on the server (default is '0') (GH#63) - Use the correct types when calling 'curl_easy_setopt()'; this fixes warnings generated by libcurl's 'typecheck-gcc.h' (GH#61) - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the 'ProductIds' option was renamed to 'EditionIDs'; the old options will continue to work, but upgrading to the new names is recommended for forward compatibility��s� �%zFedora Release Engineering <releng@fedoraproject.org> - 2.4.0-3Y���- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild � ��!� ��x� �{Fedora Release Engineering <releng@fedoraproject.org> - 2.2.2-2V��- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild�X�wa�Q{Paul Howarth <paul@city-fan.org> - 2.2.2-1V��- Update to 2.2.2 - geoipupdate now calls fsync on the database directory after a rename to make it durable in the event of a crash - Update autotools patch��vi� zMichal Ruprich <mruprich@redhat.com> - 2.5.0-2dFo@- Resolves: #2188376 - Add support for hashed license keys to geoipupdatey�ui� zMichal Ruprich <mruprich@redhat.com> - 2.5.0-1\]o@- Resolves: #1643470 - Add geoipupdate package - Initial commit � � � ��|� �{Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-2Yx�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild�'�{a�o{Paul Howarth <paul@city-fan.org> - 2.4.0-1Y(�- Update to 2.4.0 - geoipupdate now checks that 4��z� �{Fedora Release Engineering <releng@fedoraproject.org> - 2.3.1-2X��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild�^�ya�]{Paul Howarth <paul@city-fan.org> - 2.3.1-1Xn5@- Update to 2.3.1 - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or greater - Previously, on an invalid gzip file, geoipupdate would output binary data to stderr; it now displays an appropriate error message - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33) - $(sysconfdir) is now created if it doesn't exist (GH#33) - The sample config file is now usable (GH#33) the database directory is writable: if it is not, it reports the problem and aborts - geoipupdate now acquires a lock when starting up to ensure only one instance may run at a time: a new option, 'LockFile', exists to set the file to use as a lock ('.geoipupdate.lock' in the database directory by default) - geoipupdate now prints out additional information from the server when a download request results in something other than HTTP status 2xx; this provides more information when the API does not respond with a database file - ${datarootdir}/GeoIP is now created on 'make install' (GH#29) - Previously, a variable named 'ERROR' was used, which caused issues building on Windows (GH#36) - Drop EL-5 support - Drop BuildRoot: and Group: tags - Drop explicit buildroot cleaning in %install section - Drop explicit %clean section - noarch subpackages always available now - libcurl-devel always available now " d " �>�~a� {Paul Howarth <paul@city-fan.org> - 2.5.0-1Y�e�- Update to 2.5.0 - Replace use of strnlen() due to lack of universal availability (GH#71) - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64) - Remove unused base64 library (GH#68) - Add the new configuration option 'PreserveFileTimes'; if set, the downloaded files will get the same modification times as their original on the server (default is '0') (GH#63) - Use the correct types when calling 'curl_easy_setopt()'; this fixes warnings generated by libcurl's 'typecheck-gcc.h' (GH#61) - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the 'ProductIds' option was renamed to 'EditionIDs'; the old options will continue to work, but upgrading to the new names is recommended for forward compatibility��}� �%{Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-3Y���- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 9 ��x � 9 � �e� |Andrew Price <anprice@redhat.com> - 3.1.10-6Z&�@- gfs2_edit: Print offsets of indirect pointers Resolves: rhbz#1518938�7�e� |Andrew Price <anprice@redhat.com> - 3.1.10-5Y��- Update URL in spec file Resolves: rhbz#1501738 - fsck.gfs2: Make -p, -n and -y conflicting options Resolves: rhbz#1507091��e�-|Andrew Price <anprice@redhat.com> - 3.1.10-4Y��- gfs2_edit savemeta: Fix up saving of dinodes/symlinks Resolves: rhbz#1482542�u�e�|Andrew Price <anprice@redhat.com> - 3.1.10-3X���- libgfs2: Issue one write per rgrp when creating them - mkfs.gfs2: Fix resource group alignment issue - mkfs.gfs2: Free unnecessary cached pages, disable readahead Resolves: rhbz#1440269�� i� {Michal Ruprich <mruprich@redhat.com> - 2.5.0-2dFo@- Resolves: #2188376 - Add support for hashed license keys to geoipupdatey�i� {Michal Ruprich <mruprich@redhat.com> - 2.5.0-1\]o@- Resolves: #1643470 - Add geoipupdate package - Initial commit : s�* : �l�g�s|Andrew Price <anprice@redhat.com> - 3.1.10-10^��- libgfs2: Use sizeof for 'reserved' fields in ondisk.c - fsck.gfs2: Disambiguate 'check_data' - gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta - fsck.gfs2: Disambiguate check_metalist - fsck.gfs2: Fix segfault in build_and_check_metalist - fsck.gfs2: Retain context for indirect pointers in ->check_metalist - fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations Resolves: rhbz#1487726�4�e�|Andrew Price <anprice@redhat.com> - 3.1.10-9[��- fsck.gfs2: Don't check fs formats we don't recognise - libgfs2: Fix pointer cast byte order issue Resolves: rhbz#1616389� �e�7|Andrew Price <anprice@redhat.com> - 3.1.10-8[,�- glocktop: Remove a non-existent flag from the usage string Resolves: rhbz#1544944� �e�/|Andrew Price <anprice@redhat.com> - 3.1.10-7Z�>�- mkfs.gfs2: Scale down journal size for smaller devices Resolves: rhbz#1498068 4 ^�� 4 �5� q�{}Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[� q�G}Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081�� k�3|Andrew Price <anprice@redhat.com> - 3.1.10-11.1_u�- mkfs.gfs2: Don't use i/o limits hints <4K for block size Resolves: rhbz#1853625� � g�W|Andrew Price <anprice@redhat.com> - 3.1.10-11^�(@- gfs2_jadd: Handle out-of-space issues - gfs2_jadd: error handling overhaul Resolves: rhbz#1837640 u �T� u ��i�)}Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/}Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �i�Q}Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.�� i�)}Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��{� }Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�k� }Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=}Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o}Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �i�Q~Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)~Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�q�{~Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:� k� ~Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=~Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o~Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��i�)~Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/~Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5� q�{Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[� q�GSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081�� s� ~Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365�� {� ~Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��$i�)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�#q�/Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �"i�QPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��!i�)Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��({� Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�'k� Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��&u�=Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�%u�oOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �+i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��*i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�)q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�0k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��/u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�.u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��-i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�,q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�4q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�3q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��2s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��1{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��8i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�7q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �6i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��5i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��<{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�;k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��:u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�9u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 e �r+��V��: � � e D� � bf6b711d995c2cfcd7c146204145b34ce97998804eb37c62306f383d81097962D� � 7f8cb3fbedf15a4146ccc43a641071e7f99fbde04c72526476d5cd90545e4644D� � 6f603069d8c52e3cf80cd2299fead7f8539598c42a9cd85ae42363724530da93D� � 6a1b6459f1f724a4030deb520745ead7657fcaae71a35ba2905022d5da341997D� � 5c264476a12da876822ba10518576ea9ba06566847192d58c4642df8ad70f0deD� � eace35203de4fbc64ea081a27197877a56615d25b23b30e79f559209ff736310D� � ae71e0763354a3a81b14cb8bd4de22629e35e59b0045199ad6958323fac31e30D� � 2f40644349b7b023a5ac1b6045dc14e19a4d5af38ffd90e8907d4b98929b12b2D� � e07e25a4f64939f2fc2c8dfbcd0358561025cfc19d01318d054b161d02e76a80D� � 4a1eda7aca52060e944393a7b40798a1e90bbd8b4ffcf3bdfe5779ccbe2acc43D� � e4d4ae004f1e33c3542d967b6301d6307f9a848be51a7008ff5726259a3e5a5dD� � a0b6efe5d9993351a08c5873bc1be89455d96a5535d9bf69e24384ab21850577D� � c37e4471ce6ce9e562309ca353e9b1cd0725d1ec5d073e80ad7a9ba3f32732c1 � G; � � �?i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��>i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�=q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�Dk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Cu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�Bu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��Ai�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�@q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�Hq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�Gq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��Fs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��E{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��Li�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Kq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �Ji�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Ii�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��P{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�Ok� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Nu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�Mu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �Si�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Ri�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�Qq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�Xk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Wu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�Vu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��Ui�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Tq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�\q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�[q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��Zs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��Y{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��`i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�_q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �^i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��]i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��d{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�ck� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��bu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�au�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �gi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��fi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�eq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�lk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��ku�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�ju�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��ii�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�hq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�pq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�oq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��ns� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��m{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��ti�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�sq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �ri�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��qi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��x{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�wk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��vu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�uu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �{i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��zi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�yq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:� k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�~u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��}i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�|q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l �� {� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:� k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008�� u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5� q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u �� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l �� {� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:� k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008�� u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �#i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��"i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�!q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�(k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��'u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�&u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��%i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�$q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�,q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�+q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��*s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��){� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��0i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�/q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �.i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��-i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��4{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�3k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��2u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�1u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �7i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��6i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�5q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�<k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��;u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�:u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��9i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�8q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�@q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�?q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��>s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��={� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 e �r+��V��: � � e D� � 497230bf98b04ad42a5e86190210020c9d693a673e748256dfdae01fda278f6bD� � e3c6ac455f3f655e70629ab69610a70ab4f4e55490536ec08dc32ec06031f28bD� � 6c21b000ed4eaee655f575de1d380dded8d228f9631df396279ba89debbe6faeD� � ce44bc6fbc305c3861c8d26e236f8872ccd1827001528bced75ea5a087db84d4D� � 84b71cd28250d68d8dd0c9a9da4983782f0ef2c5888c5734b7d12841ff61313bD� � ee8a7377ed0c955a55eec8ea39cbb91e5c2b99a4b050e0f4136075e5c7c87796D� � b649840984828bb702a86f59b74053d9fb62a7d9512eed421f9ac6fd2c5e648aD� � e6b35740952d21b92b5fd63b78ed0f5a4649c9aeb22cf9cb5af2d6c5c8a86dc3D� � 37036b6e228127d501401f8546d504c70f6e51fcc1271a33342effbc6d6a62cdD� � 44fdf0fd6b2ea0867e2530297d92b753e9b67534567ffa09595ff50bc74c9886D� � 4f181bcb90816497b5e18006556c8e9c5e26bb5a1da4f5be2acce0472c81866dD� � 087a9eb6f7e5a03f17d35ced5aea62e436334f59bd027880ae3be3eb69257219D� � 37146ed7255163cbdf3bb94a0f5e8ea9cb46eeddd0d269546fb213017f212548 u �T� u ��Di�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Cq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �Bi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Ai�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��H{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�Gk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Fu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�Eu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �Ki�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Ji�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�Iq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�Pk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Ou�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�Nu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��Mi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Lq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�Tq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�Sq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��Rs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��Q{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��Xi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Wq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �Vi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Ui�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��\{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�[k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Zu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�Yu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �_i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��^i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�]q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�dk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��cu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�bu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��ai�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�`q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�hq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�gq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��fs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��e{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��li�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�kq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �ji�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��ii�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��p{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�ok� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��nu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�mu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �si�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��ri�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�qq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�xk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��wu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�vu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��ui�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�tq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�|q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�{q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��zs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��y{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u �� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �~i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��}i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� J�P K�S L�X M�\ N�` O�d P�g Q�l R�p S�t T�x U�{ V� W� X� Y� Z� [� \� ]� ^� _�# `�( a�, b�0 c�4 d�7 e�< f�@ h�D i�H j�K k�P l�T m�X n�\ o�_ p�d q�h r�l s�p t�s u�x v�| w� x� z� {� |� }� ~� � �� ��' ��. ��5 ��< ��C ��J ��Q ��X ��_ ��f ��m ��t ��{ �� �� �� �� �� ��$ ��( ��/ ��4 ��; ��@ ��G ��N ��U ��\ ��c ��k ��r ��y �� �� �� �� �� ��" ��) ��0 ��7 ��> ��E ��L ��S ��Z ��a ��e ��i ��o ��t ��{ �� �� �� �� �� ��& � G; � � �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:� k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008�� u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387�� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365�� {� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:� k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008�� u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387�� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 3 {�~�E � 3 � �'u�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�&iy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221��%a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �$u�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�#iy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221��"s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��!{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 M g�c�_ � M � �.u�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�-iy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221h�,u_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��+a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000h�*u_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��)a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��(a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000 e �r+��V��: � � e D�( � 79588570ccbd1df263463cf10a5d97ef323266e2abedfeb2fefafd34609a08dfD�' � 45fefc5e38fdda8877b262c158dcf1558ddd8b48fca3c2cd58b21d90e637096fD�& � 449fcca21f14ce7eafdbe53266ec3665872f2ce58cd9fd10b5ebe923ec7e12a2D�% � cb1bff3dcdabc1801553de1e4bae164ca1ca0aa473eebe3e7afd8360d53dcad7D�$ � b65a283b2abdd24d3efe7491ad9fbe6bab445307ebf30070af80a0fd335b8560D�# � d1d53660bffa4c0d03720470eba69755d1fe600ebcd13dc49a736237a10983ebD�" � 3c79cb3de74e545373941c507295276cafff95e505438c0bb771fd73deb0cf11D�! � 722785536ad769e0f2077e33c2c6aa02937baf01e2357433b6873c7a444503daD� � 0506a69ed5099abb05188f0ad253ebf7fb23f9516de5789b336622a000b67e9dD� � e10f54c5d580e560b5d4611357d17fabf744c685d0597c57f65096c26149632cD� � c1b656d07a2265aaad3c80a8e621f30eacc4d7131ecac7e66fade5608ce366e2D� � 0918063cb9b48c317391f431d587661c39613d95bd83d01ca9029660d7a1dfd9D� � 8509fe4641cb16b24f3aced3e8cb56ef28648055b03221b4d4cb4017259e1995 g�U�# � ��5a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000h�4u_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��3a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��2a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �1u�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�0iy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221��/a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000 t �#��Q � t o�<iy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221h�;u_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��:a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��9a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �8u�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�7iy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221h�6u_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596 `�.�Q � ��Ca�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �Bu�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�Aiy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221h�@u_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��?a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��>a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �=u�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099 M ��U�Q � M h�Ju_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��Ia�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000h�Hu_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��Ga�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��Fa�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �Eu�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�Diy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221 e �r+��V��: � � e D�5 � d2c498e78241cc2d36124d37d4771f877da25de95d6a31c1ad42e1287fdda746D�4 � 136c98f13aca8088f8a6db32a4f1c09e88ab4e875a90611b2c854ca63a7db95aD�3 � 7b99cae552eb8e3aa9044c06a0c67601794c80300cf140324bc228da9d9f0c30D�2 � d7000378e73195f460b1df7dafb97183eefb63440b39636075973f460f0b141dD�1 � c67a99f8d73138551a0d40218c32828b28c8df46641ed69f149aa858bfb4476cD�0 � d0c3a21a7ae050cc88bb11365edee8ae76ce4656de55be60d371d691353d0a2aD�/ � a09b59d166ae4f96e35aa50238b29f47cbf2e30ed154a83dd200b7627918a160D�. � b2b420ac2c03b3a2e4cadd073857498446180ec51a863fe30335c9da3a963fdeD�- � ee561a3f0dd8945edec3478e8426cc324bdf6fc5fe6a31d762cfae60d3e14830D�, � d41ecaf1cea900f2c9354fc197197c80a88316766208fa264735e4153be0668eD�+ � c7dec18b5dff68e91dd42275e011d20aecbe60817c948f50fef7adfc8276ec34D�* � 1f62ae8c12fed4f7639f910b2b5ff758d169ec26fdf5536df0cfd5d6bee2d247D�) � bbce7868f8e66ee5f69db6702fdb909d81b8c17bb4f7417dbf08a87ef2a26308 \ ��U�Q � \ � �Qi�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�Pia�Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)h�Ou_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��Na�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��Ma�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �Lu�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�Kiy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221 O ��~} O �/�Xi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Wi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Vi��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Ui� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Tik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Si�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�Ri��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325) � � �y � z�_i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�^ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��]i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�\i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �[i�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�Zia�Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)x�Yi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) - |N�D � - ��fi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�ei��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �di�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�ci� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�bi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�ai� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �`i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) � ��f � � f�ms]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�li� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�ki�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�ji� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �ii��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�hi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�gik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) s q�Z�r � s x�ti� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �si��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�ri� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�qik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��pi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�oi��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �ni�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816) j M�i�R � j z�{i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�zik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��yi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�xi��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�ws]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�vi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�ui�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) d |N�j � d u�i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f� s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�~i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�}i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �|i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) L a�y�z � L x� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853) � � j�� � � x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)�� i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)� � s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f� s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) M�i�" � h�ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)�5�i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) _ ����V � _ � � s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f� s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543) � G��5 � � �$s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�#s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�"i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�!i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�5� i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930) j G�C j �U�(m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules��'m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i�&W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�%i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930) 2 �]�y � 2 �5�/i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �.s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�-s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�,i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�+i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�*i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)r�)m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263) 3 ��# � 3 x�4i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)r�3m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U�2m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules��1m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i�0W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058) M�i�" � ��;m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i�:W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�9i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �8s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�7s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�6i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�5i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) F '�G � F � �@i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�?i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�>ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)r�=m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U�<m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules e �r+��V��: � � e D�B � ff4671dfa3a8f95a13b8ba51b2a558742445e61b30cbb1cf07788364ca2bb076D�A � aab72ef4b89bc4481b87f7aaf225cbdefb62073dddddc7fc7c2b94ab11a0a936D�@ � acbb0c34227bd9c7bba35cfa08b4942dd141ee4ccadd128d8acedaef5e31522cD�? � 1cdd1bc2cbd53aa25851e70a8024e7e85db9b9d0fcdfcc2df323c89e5944ec7aD�> � 43b68e9aee5969d0a7628cb49b8b9e8a4b328432cd2bbf3a542567a7d9be9cc8D�= � aba75d84977de2cd5e9da00e763912c5e72ba28b55b17e081014e97ca13ce809D�< � 9d6c8bed9c4d8626f8fd6586301ec93617410de9408cd2b65fef37c2cea142c9D�; � f48caf62db65a846a2e5bf134e7e6a5aa0bcc81a67c9995255a33f3f18ab9f65D�: � 0fbc642e2648e77838d136eb26008e221d165a8465fd50b51c8e7ef52d5c3376D�9 � f48d75115ac638576d608849a173ace6a70c2430a2e0226487652befdf004b27D�8 � c59d4299cbd7dc796fc38b8ac3ad9e4a8030d20ee8831940a24af8b28a84cca5D�7 � 58dd6ecca9f9c38c402d46c56efacaf2a8739de21c64f22dfb3f9887f2de6c94D�6 � 7b92de985a23ef4b67bd11135a92917ca99025920b1e4db59517205a2278c3f1 ; ��W�` � ; i�GW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�Fi��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �Es�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Ds]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Ci� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Bi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Ai� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) � ��f � � f�Ns]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Mi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Li�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Ki� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Ji��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Ii� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Hik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) A r�M�X � A ��Ui�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�Ti��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �Si�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�Ria�Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i�QW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�Pi��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �Os�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536) \ ��f � \ � �\i�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�[i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Zi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Yi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Xi��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Wi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Vik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) O ��~} O �/�ci�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�bi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �ai��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�`i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�_ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��^i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�]i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325) � �� � x�ki� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �ji��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�ii� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�hik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��gi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�fi��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�es]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�di� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) T M�i�< � T z�ri� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�qik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��pi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)� �os�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�ns]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�mi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�li�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) # |N�j � # �5�yi��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �xs�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�ws]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�vi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�ui�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�ti� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �si��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) ; ��W�` � ; i� W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �~s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�}s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�|i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�{i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�zi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) 2 h� � 2 z�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)r�m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U�m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules��m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803) # |N�j � # �5� i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� � s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f� s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) �.�'� � � �i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �i�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�ia�Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i� W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058) K ��W�b � K ��i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �i�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�ia�Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) \ ��f � \ � �"i�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�!i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/� i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� � i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) O ��~} O �/�)i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�(i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �'i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�&i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�%ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��$i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�#i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325) � � �v � z�0i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�/ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��.i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�-i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �,i�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)f�+s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�*i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) S |N�j � S ��7i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�6i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�5s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�4i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�3i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�2i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �1i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) � ��f � � f�>s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�=i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�<i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�;i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �:i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�9i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�8ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) t r�[�s � t x�Ei� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Di��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Ci� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Bik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Ai�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�@i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �?s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536) e �r+��V��: � � e D�O � cffd614b0edc8b160d92daa7f3c4c4dffd5e33a66532c35ee32132d1b56e63b7D�N � 91de6d1a2c900bf6a030d637e635ba8bed416176970159ef63c61ba70f93a275D�M � b3e7d51cd260028cee1b21b2d94a9e4694745e0e673f10a05aebb54a5a4928abD�L � c4697b0258943ed3a070f75ed2b1163ddeb2746108163a6b372318bfc419db74D�K � 9ba71fe357dd09d1913b30b0bd83507588d8cb06eda6f2c15326f3f1384c6180D�J � b05ac36a6c2c5fb2a3b34dee8aff347281f1ee28b49846b4add728a5cd69f06aD�I � 68765f29d06d31652e80d398846d899e7437a836c1fffeb61248afa76e51b90fD�H � 178ac00cbf99e924ca4b26e5bede47496404e34c1fe48906789d80dd955c9793D�G � 9c54883a611d1da210a5b0909cd7fd415b6c99473614fab81bae9df9cf8c6be2D�F � 15c7b778a896d0c127b0468d18a519b750dbd5a649ccba7fbb6b5b215b7243d6D�E � a25ea7a2e7fdf9c96aa665fd1d337fa501a8be996a208eede238af6018d94012D�D � 7ea4c424cb331a1de27539fd790be4a991e6525f0d33035d854f2e66e0c2e274D�C � 235d7a11f2bec5ce59b3207ad420c1a0034747f77ac4902d343951c7bd4109d6 T M�i�< � T z�Li� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Kik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Ji�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)� �Is�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Hs]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Gi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Fi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) # |N�j � # �5�Si��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �Rs�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Qs]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Pi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Oi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Ni� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Mi��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) L a�y�z � L x�Zi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Yi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Xi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Wi��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Vi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Uik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Ti�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853) > � P�" � > f�as]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�`i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�_i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�^i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�5�]i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �\s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�[s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) � r�M� ��em�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i�dW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�ci��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �bs�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536) � '�7 � �/�ii�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�hi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)r�gm{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U�fm�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules � � ��i � ��om�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i�nW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�mi��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �ls�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�ks]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�ji� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) F '�G � F � �ti��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�si� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�rik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)r�qm{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U�pm�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules ; ��W�` � ; i�{W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�zi��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �ys�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�xs]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�wi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�vi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�ui� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) � ��f � � f�s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/� i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �~i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�}i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�|ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) A r�M�X � A �� i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �i�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�ia�Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i�W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536) \ ��f � \ � �i�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� � i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) O ��~} O �/�i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325) � �� � x� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� � i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) T M�i�< � T z�&i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�%ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��$i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)� �#s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�"s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�!i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/� i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) # |N�j � # �5�-i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �,s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�+s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�*i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�)i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�(i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �'i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) ; ��W�` � ; i�4W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�3i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �2s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�1s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�0i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�/i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�.i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) 2 h� � 2 z�9i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�8ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)r�7m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U�6m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules��5m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803) # |N�j � # �5�@i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �?s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�>s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�=i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�<i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�;i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �:i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) �.�'� � � �Hi��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Gi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Fik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Ei�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�Di��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �Ci�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�Bia�Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i�AW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058) e �r+��V��: � � e D�\ � deefbf7dc62157f10bf35bfcceae5fb497403a6fbf86fef1e8cfd5636f7bad10D�[ � 670e8233e94a81c11ff801e9565903257b0694462a07b7f8724d3008d060ad94D�Z � 2fda5e0025c27a97a92116265279bc7592a072372d95f68ec7c2e289e884155bD�Y � df21a3fb768e603f322d9c16831a48f1a953dcc954f4b9b79e30a3e77107cd77D�X � 4266dcf7867c8c57f9684916eb7d5867aba2298775bf2e55af86bb7d8b4ef39cD�W � 5e130e7019c26fc26493cc8b1c227f57d4451afda99fda03e0dac4bd46628980D�V � f7501b0cdc7eb8f83b56ce263d1a1408914f103af339c893bd31a587ad345cd3D�U � f2fa340f24195c35a86b3ed5c2f4ca5405ba1e6482aab26dd1e8d7ce339a73fbD�T � 6815b9d123a4214f4d4bf68b7d0d6c2ea059a5ed94bf0abe1b157d1e14de7f6cD�S � 49e01e923bc5d1026751341c9a01ab8ef4d50d8b17e94f179de33afcbfb0b234D�R � eae7a2d2bc9f6058c113c27e6bdea6677a865df0f7924ed51165a2653c2d2175D�Q � 650dc5eb73a88b8297704da202b361a3a2367643c25269a9d667ea5803dbc397D�P � aeb54137355c495d8cbda465df5347f7e0075a2330f89bc679ccd9d8f8d5b4f6 K ��W�b � K ��Oi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�Ni��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �Mi�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�Lia�Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)x�Ki� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Ji�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Ii� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) \ ��f � \ � �Vi�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�Ui� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Ti�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Si� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Ri��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Qi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Pik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) O ��~} O �/�]i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�\i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �[i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Zi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Yik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Xi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�Wi��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325) � � �v � z�di� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�cik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��bi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�ai��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �`i�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)f�_s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�^i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) S |N�j � S ��ki�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�ji��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�is]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�hi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�gi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�fi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �ei��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) � ��f � � f�rs]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�qi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�pi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�oi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �ni��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�mi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�lik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) t r�[�s � t x�yi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �xi��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�wi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�vik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��ui�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�ti��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �ss�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536) T M�i�< � T z� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��~i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)� �}s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�|s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�{i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�zi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) # |N�j � # �5�i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) L a�y�z � L x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/� i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� � i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853) > � P�" � > f�s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)�5�i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) � r�M� ��m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i�W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536) � '�7 � �/� i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)r�m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U�m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules � � ��i � ��#m�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)i�"W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�!i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� � s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f� s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x� i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) F '�G � F � �(i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�'i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�&ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)r�%m{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U�$m�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules ; ��W�` � ; i�/W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�.i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �-s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�,s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�+i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�*i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�)i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) � ��f � � f�6s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�5i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�4i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�3i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �2i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�1i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�0ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) A r�M�X � A ��=i�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�<i��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �;i�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�:ia�Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i�9W�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�8i��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �7s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536) \ ��f � \ � �Di�/�Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�Ci� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Bi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Ai� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �@i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�?i� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�>ik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) e �r+��V��: � � e D�i � 5c3a51f2cd800bc1eb63007add93f02cb14e4acbe93b537fa3fb5d1a05f91ceaD�h � 9ff292253bb056d6533811af24502ff8e6b9f03d370e153698aff7cc1cb568b6D�g � 794055514a0043fb0a97d85b7e623b6862a4861b6e488835385596d392b4f24eD�f � a9cdf7b1790648907c553d9bd3ea79400a2884d68c1cb870f1c3d0c0ef2af44dD�e � 63e5114d5fdf7fa2162781d184e8588d2af92fd268bf72cf0824edd0ad85d504D�d � 83e83351bd9f8e17bb928673f2236a6035cf3a335789585a60a5d5068c2c8b23D�c � 68fdae357028fe930922530fba8f0491b1f04b11e6ce8cc9f6c7b362bfe37101D�b � bffa643f42fbf585a2b14d6c8bfb9d7ac804826cf20ad4d14bbdc3c996290615D�a � b8969d6cee16b77e095cb73262e74f3bea7aeaacc386fb96ed8274c2732c2893D�` � 71b7e0dd87fd725a96f1b8e998c7b16f7c063cf2f5888312df9191de086378b7D�_ � 4c33dc16f8bf9f19d59d71c209205c27c9923c2016d5ca5f3409885c95bd8be4D�^ � ae5b869408794a434481ba8d5927690a56b9e2045b44efc1cca5b637285e435cD�] � cafdbebcda7664e47d81f647d715249983cbe0bb4b063c1d56ab327a8766e2d0 O ��~} O �/�Ki�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Ji� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Ii��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Hi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Gik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Fi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�Ei��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325) � �� � x�Si� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Ri��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Qi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Pik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Oi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�Ni��Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�Ms]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Li� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) T M�i�< � T z�Zi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Yik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Xi�O�Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)� �Ws�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Vs]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Ui� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Ti�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) # |N�j � # �5�ai��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �`s�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�_s]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�^i� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�]i�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�\i� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �[i��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) ; ��W�` � ; i�hW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�gi��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �fs�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�es]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�di� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�ci�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�bi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) 2 h� � 2 z�mi� �Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�lik�Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)r�km{�Florian Weimer <fweimer@redhat.com> - 2.17-326.3f3�@- nscd: Fix timeout type in netgroup cache (RHEL-34263)�U�jm�?�Florian Weimer <fweimer@redhat.com> - 2.17-326.2f0�@- nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cache - CVE-2021-27645: nscd: double-free in netgroup cache - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache - CVE-2024-33601: nscd: crash on out-of-memory condition - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules��im�=�Florian Weimer <fweimer@redhat.com> - 2.17-326.1f h@- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803) # |N�j � # �5�ti��Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �ss�#�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�rs]�Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�qi� �Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�pi�w�Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�oi� �Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �ni��Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) �;��0�I � � b�~� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�}�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�|�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�{�g�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926k�z�Q�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�yu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�xu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�wu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�vu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714i�uW�DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058) D �4�l � D `��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\���1�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641b�� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`� �;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f�yW�CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager lines + ��d��K � � + k��Q�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V� u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V� u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V� u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V� u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714d� uW�CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R��� �Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375 c �$�\��- � c b�� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f�yW�CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v��g�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926 : �=� � : d� uW�CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`� �;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R��� �Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\���1�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641 ! �N��.�R � � ! f�'yW�CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�&� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�%�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�$�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�#�g�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926k�"�Q�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�!u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V� u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V� u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V� u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714 J �:�p � J `�.�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�-�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�,��1�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641b�+� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�*� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�)�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�(�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372 � *�`�U � � k�6�Q�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�5u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�4u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�3u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�2u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714d�1uW�CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�0�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�/�� �Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205 c �$�\��- � c b�?� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�>� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�=�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�<�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f�;yW�CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�:� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�9�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�8�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�7�g�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926 : �=� � : d�EuW�CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�D�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�C�� �Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`�B�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�A�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�@��1�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641 e �r+��V��: � � e D�v � 72811299e34ce97ab4abb454b8e728ca0bcc192a314cab3cc6799df21cc7b92bD�u � c40a3a99e0047693ac6789e2c35f28639c6c6c3dafcaa8083ab1f6aec4279cd6D�t � aa8159ebe427848a84e44ec1263eb6e8467bd09994185803163c9501ede167adD�s � dd928d632917d65ac27ed05d45f342a550ac01430159ae99363d9a406701fe04D�r � 276df6b2e20398eb1acd7d2327f480491884ec450b49410d4cad1f010cba2e36D�q � ea5bee404d5fc3e07b6c6c946b4663fdc9b4befd89d89e5fd0c57da7b27800ecD�p � b843af350666656b6246dd355d5e90fac356a7c6b609118d69957fefcf9350b3D�o � a100ffb8d2d8478959b6d515f8a57612af98cd23cd3f340be8fdc45b223ebd2bD�n � b83531fbbb21a612cb6bf9dd29ef1ba3afdeacd82de1d86b9949dac00d9edecbD�m � b808a968c2ce3fd33503aecac4b0f640badeb9c4fc64b22515676fc26677bdbaD�l � 18f14d208b245267c6cc29b0b7074e0e030ee89e895659c26047d4186135bd94D�k � 6c06e0b4e7b36d4a64097557ada558aaa42f90b60af6f66d06329756c6ea57c9D�j � b126c7678a3e74f9a0dca6136f61a6fdd9471991c6ce22a72c08d8a8aa86f2e1 ! �N��.�R � � ! f�OyW�CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�N� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�M�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�L�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�K�g�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926k�J�Q�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�Iu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�Hu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�Gu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�Fu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714 J �:�p � J `�V�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�U�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�T��1�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641b�S� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�R� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�Q�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�P�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372 � *�`�U � � k�^�Q�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�]u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�\u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�[u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�Zu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714d�YuW�CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�X�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�W�� �Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205 c �$�\��- � c b�g� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�f� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�e�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�d�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f�cyW�CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�b� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�a�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�`�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�_�g�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926 : �=� � : d�muW�CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�l�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�k�� �Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`�j�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�i�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�h��1�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641 ! �N��.�R � � ! f�wyW�CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�v� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�u�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�t�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�s�g�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926k�r�Q�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�qu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�pu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�ou;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�nu;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714 of 6flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��4 ��9 ��@ ��H ��O ��V ��] ��d ��k ��r ��y �� �� �� �� �� �� ��# ��( ��/ ��6 ��= ��D ��K ��S ��Z ��a ��h ��m ��t ��~ �� �� �� �� ��' ��. ��6 ��? ��E ��O ��V ��^ ��g ��m ��w ��~ �� �� �� �� ��& ��. ��7 ��= ��C ��I ��O ��W �_ �e �l �s �x � � � � � � �' �- �5 �= �E �M �S �Y �` �f �m �t �z � � � � � �" �) �0 !�6 "�= #�D $�J %�Q '�X (�^ )�e *�l +�r ,�y -� .� /� 0� 1� 2�! 3�( 4�. 5�5 J �:�p � J `�~�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�}�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�|��1�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641b�{� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�z� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�y�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�x�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372 � *�`�U � � k��Q�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714d�uW�CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`� �;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R��� �Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205 c �$�\��- � c b�� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`� �;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`� �;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f� yW�CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb� � ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`� �;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v��g�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926 : �=� � : d�uW�CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R��� �Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`��;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\���1�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641 ! �N��.�R � � ! f� yW�CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb� � ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`� �;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`� �;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v��g�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926k��Q�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714 J �:�p � J `�&�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�%�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�$��1�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641b�#� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�"� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�!�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`� �;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372 � *�`�U � � k�.�Q�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�-u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�,u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�+u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�*u;�Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714d�)uW�CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�(�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�'�� �Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205 c �$�\��- � c b�7� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�6� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�5�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�4�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f�3yW�CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�2� ;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�1�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�0�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�/�g�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926 : �=� � : d�=uW�CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�<�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�;�� �Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`�:�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�9�;�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�8��1�Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641 � P�j�i � t�Csy�Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Be��Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Ae� �Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�@qw�Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�?ms�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�>q�i�Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501 j �e�P � j r�Iqw�Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Hms�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�Gs� �Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Fs�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Es�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Ds��Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999 e �r+��V��: � � e D� � 8afb8e27332a8489152d37ca03c25098d73ea51e0982b87f6a7bb7d35104b927D� � 6ff94086763de7dbc7a08197fae9ec80ef7dbba995606dc86e245517b4635a11D� � 68b19039b1e53465dc3f08f0e56e24f7e1672b449a51dd05f8ae10ff49416b66D� � 86f47f4e0ba937bd5cc3e11936092ae2624f85a10417a53a3620844161158224D� � 821df7321c6fd01dc77f9435ba556d7b08cfdfdb262113c4223883e34adeedf3D�~ � 195f9b3429ced50e475e3f14ae59ece2ac1f581466cf6713231c9da9927283e0D�} � b08dd14ff4c9cde964c7eb832ae4496d321debc822b86b970f8051ca8589c6b3D�| � c4456d3a9934c3fe90a0750649cc735745508843da43735b39aa5cdcaadb99a4D�{ � d6af98392b986204b8b504202adcf13ec1eca355c819f9d4a1ee4d8448a14c55D�z � be7ce57daa28ef35ce7974665112d6551b70b8c48b1c14c9fb067c8aae658533D�y � 134432ad69b8ff48c6929ed4f645153058d8cb0020dbb0be3eeb7ead882052b9D�x � 838f9c1a4495b9f9bd85ed4019e8c2dc8ac645f72e221541ed03338c1cea45bdD�w � e67c1938cd59583e0619d2d7e8c5830ae4585c3509d473ef7f73fac3a559c82f Z {��� � Z ��Os�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Ns�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Ms��Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�Lsy�Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Ke��Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Je� �Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 � ~ �p$� � ��W]�'�Rui Matos <rmatos@redhat.com> - 3.22.1-4Y��- Make our password validation similar to anaconda's Resolves: rhbz#1447941��V]�3�Rui Matos <rmatos@redhat.com> - 3.22.1-3Y �- Disable 'software' page as it doesn't make sense in RHEL Resolves: rhbz#1446735x�U]��Rui Matos <rmatos@redhat.com> - 3.22.1-2X�C�- Honor anaconda's firstboot being disabled Resolves: rhbz#1226819I�Te1�Kalev Lember <klember@redhat.com> - 3.22.1-1W�%�- Update to 3.22.1I�Se1�Kalev Lember <klember@redhat.com> - 3.22.0-1W��@- Update to 3.22.0K�Rg3�Kalev Lember <klember@redhat.com> - 3.21.92-1W��@- Update to 3.21.92q�Qss�Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Ps� �Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 C v�"s � C k�_ay�Ray Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�^a_�Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�]e[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621�+�\i�o�Bastien Nocera <bnocera@redhat.com> - 3.26.2-9Z�$�+ gnome-settings-daemon-3.26.2-9 - Revert automatic suspend after inactivity, it was rejected - Related: #1449171q�[ym�Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.0-2.1b���- Remove timezone boundaries Related: #2098257z�Za��Ray Strode <rstrode@redhat.com> - 3.28.0-2\�F@- Ensure vendora logo gets used instead of foot Resolves: #1711308`�Yi[�Richard Hughes <rhughes@redhat.com> - 3.28.0-1[�- Update to 3.28.0 - Resolves: #1568175��X]�1�Rui Matos <rmatos@redhat.com> - 3.22.1-5Y��@- Update session definition files to work with GNOME 3.26 Resolves: rhbz#1506607 � q�f� � ��ee�!�Benjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�dc��Benjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �cm�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320��bm�7�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�am}�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �`m�+�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904 � Q��!� � ��lm�7�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�km}�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �jm�+�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�iay�Ray Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�ha_�Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�ge[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621�+�fi�o�Bastien Nocera <bnocera@redhat.com> - 3.26.2-9Z�$�+ gnome-settings-daemon-3.26.2-9 - Revert automatic suspend after inactivity, it was rejected - Related: #1449171 p s�/�m � p � �sm�+�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�ray�Ray Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�qa_�Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�pe[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621��oe�!�Benjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�nc��Benjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �mm�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320 $ ��h�$ ��xe�!�Benjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�wc��Benjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �vm�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320��um�7�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�tm}�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197 " ��*�- � " ��m�7�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�~m}�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �}m�+�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�|ay�Ray Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�{a_�Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�ze[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621��yo�3�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`�t�- Fix possible crash on gsd-media-keys startup Resolves: #1878167 - Ignore permission issues during gsd-housekeeping file deletion Resolves: #1909954 - Revert mapping of "XF86RFKill" key Resolves: #1888412 l s�/ l �+�i�o�Bastien Nocera <bnocera@redhat.com> - 3.26.2-9Z�$�+ gnome-settings-daemon-3.26.2-9 - Revert automatic suspend after inactivity, it was rejected - Related: #1449171��o�3�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`�t�- Fix possible crash on gsd-media-keys startup Resolves: #1878167 - Ignore permission issues during gsd-housekeeping file deletion Resolves: #1909954 - Revert mapping of "XF86RFKill" key Resolves: #1888412��e�!�Benjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�c��Benjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� � m�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320 � �>�A�6 � � � m�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320�� m�7�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s� m}�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �m�+�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�ay�Ray Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�a_�Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�e[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621 N B� �K � N � �m�+�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�ay�Ray Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�a_�Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�e[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621�+�i�o�Bastien Nocera <bnocera@redhat.com> - 3.26.2-9Z�$�+ gnome-settings-daemon-3.26.2-9 - Revert automatic suspend after inactivity, it was rejected - Related: #1449171�� e�!�Benjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:� c��Benjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296 b ��h�$ � b ^�a_�Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�e[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621��e�!�Benjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�c��Benjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �m�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320��m�7�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�m}�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197 ' ���k � ' �� e�!�Benjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:� c��Benjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� � m�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320�� m�7�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s� m}�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �m�+�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�ay�Ray Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161 " ��*�- � " ��'m�7 Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�&m} Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �%m�+ Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�$ay Ray Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�#a_ Ray Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�"e[ Kalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621��!o�3�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`�t�- Fix possible crash on gsd-media-keys startup Resolves: #1878167 - Ignore permission issues during gsd-housekeeping file deletion Resolves: #1909954 - Revert mapping of "XF86RFKill" key Resolves: #1888412 s�/ � q�-ssFlorian Müllner <fmuellner@redhat.com> - 3.28.3-24]�N@- Fix orphaned animation actors Related: #1753799� �,c�7Ray Strode <rstrode@redhat.coM> - 3.28.3-23]�|@- Fix "Not Listed?" entry to shows characters instead of bullets Resolves: #1772896��+o�3 Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`�t�- Fix possible crash on gsd-media-keys startup Resolves: #1878167 - Ignore permission issues during gsd-housekeeping file deletion Resolves: #1909954 - Revert mapping of "XF86RFKill" key Resolves: #1888412��*e�! Benjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�)c� Benjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �(m�' Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320 X ��� � X X�5cQRay Strode <rstrode@redhat.com> - 3.28.3-32_�#�- Fix crasher Resolves: #1897063[�4cWRay Strode <rstrode@redhat.com> - 3.28.3-31_��@- Add leak fixes Resolves: #1881995� �3s�%Florian Müllner <fmuellner@redhat.com> - 3.28.3-30^�)@- Wake up lock screen when deactivated programmatically Resolves: #1850201k�2sgFlorian Müllner <fmuellner@redhat.com> - 3.28.3-29^�@- Squash more JS warnings Related: #1751121��1s�Florian Müllner <fmuellner@redhat.com> - 3.28.3-28^�@- Fix some (harmless but annoying) JS warnings Related: #1751121|�0s�Florian Müllner <fmuellner@redhat.com> - 3.28.3-27^�V@- Avoid warning on early signal emission Resolves: #1735700u�/s{Florian Müllner <fmuellner@redhat.com> - 3.28.3-26^�1�- Fix IM set-content-type handling Resolves: #1771841s�.swFlorian Müllner <fmuellner@redhat.com> - 3.28.3-25^��@- Improve performance under load Resolves: #1824871 ? �� �, � ? [�=cWRay Strode <rstrode@redhat.com> - 3.28.3-31_��@- Add leak fixes Resolves: #1881995� �<s�%Florian Müllner <fmuellner@redhat.com> - 3.28.3-30^�)@- Wake up lock screen when deactivated programmatically Resolves: #1850201k�;sgFlorian Müllner <fmuellner@redhat.com> - 3.28.3-29^�@- Squash more JS warnings Related: #1751121��:s�Florian Müllner <fmuellner@redhat.com> - 3.28.3-28^�@- Fix some (harmless but annoying) JS warnings Related: #1751121|�9s�Florian Müllner <fmuellner@redhat.com> - 3.28.3-27^�V@- Avoid warning on early signal emission Resolves: #1735700u�8s{Florian Müllner <fmuellner@redhat.com> - 3.28.3-26^�1�- Fix IM set-content-type handling Resolves: #1771841s�7swFlorian Müllner <fmuellner@redhat.com> - 3.28.3-25^��@- Improve performance under load Resolves: #1824871q�6ssFlorian Müllner <fmuellner@redhat.com> - 3.28.3-24]�N@- Fix orphaned animation actors Related: #1753799 B �1�C�? � B � �Es�%Florian Müllner <fmuellner@redhat.com> - 3.28.3-30^�)@- Wake up lock screen when deactivated programmatically Resolves: #1850201k�DsgFlorian Müllner <fmuellner@redhat.com> - 3.28.3-29^�@- Squash more JS warnings Related: #1751121��Cs�Florian Müllner <fmuellner@redhat.com> - 3.28.3-28^�@- Fix some (harmless but annoying) JS warnings Related: #1751121|�Bs�Florian Müllner <fmuellner@redhat.com> - 3.28.3-27^�V@- Avoid warning on early signal emission Resolves: #1735700u�As{Florian Müllner <fmuellner@redhat.com> - 3.28.3-26^�1�- Fix IM set-content-type handling Resolves: #1771841s�@swFlorian Müllner <fmuellner@redhat.com> - 3.28.3-25^��@- Improve performance under load Resolves: #1824871q�?ssFlorian Müllner <fmuellner@redhat.com> - 3.28.3-33` l�- Guard against StWidget crash Resolves: #1861428X�>cQRay Strode <rstrode@redhat.com> - 3.28.3-32_�#�- Fix crasher Resolves: #1897063 J �G�e�D � J ��Me� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�LqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�KmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�Jq�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501k�IsgFlorian Müllner <fmuellner@redhat.com> - 3.29.3-34`��- Fix another JS warning Resolves: #1860445q�HssFlorian Müllner <fmuellner@redhat.com> - 3.28.3-33` l�- Guard against StWidget crash Resolves: #1861428X�GcQRay Strode <rstrode@redhat.com> - 3.28.3-32_�#�- Fix crasher Resolves: #1897063[�FcWRay Strode <rstrode@redhat.com> - 3.28.3-31_��@- Add leak fixes Resolves: #1881995 e �r+��V��: � � e D� � e09b5f3555e23622b184571a63391c9f149a33111cf6ec9a07616cecca01c1c3D� � 996c2919ed070ff29e27f8c9e3ec7f7ce69e1eea9e9da6d559423f84983ba41cD� � 8d8f18480a50ae9e2993b7bee4e3a0d583f2b6288ec60e32b2b42a5b4256456aD� � 1afd010d898c09610cd98864d1e601d56fbb031d59f51f0e0e1a08fc482b006fD� � 9c633fbd6673e42c90f906b0939d7603ab4b721859bff248db9a4cc0489b32a6D� � abb8fad659ee9b374da07546268016023d98393401191ae5ac9ac40748aad0edD� � d3f83e6ec632331c1a4225feeaaf7c261512e7eb7a079d16b971c7c027fa3c0bD� � 90b70e89b675963abcce8494de690686f885b273dc190de89560db7345231837D� � d8e476878a37bbc6056f5f2cfa3f1c9b9406ca06fd0c7ba1bb6e17b09a385ae9D� � 8d5c171c9ce6a333fe8241291edf73b4b6bbed0df2258efac8cfac13210aba97D� � b06ece51d62eb4905a59da18d4a041ada4dc1d9541693245f60fa02f0ec302deD� � 30eb275b4ea0c87a84abafbe22dd3006c16cac9a0fa0c57de243a23c72d28adfD� � db4ef1e0a6b2f44fef3fdb8ad686016dcfa25ae6374a3646a9c898f01668d499 ] � r � ] �Ss� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Rs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Qs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Ps�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�OsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Ne�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270 � ��� � ��Ys�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�XsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�We�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Ve� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�UqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�TmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417 N m�X�4 � N r�`qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�_msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�^q�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�]ssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�\s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��[s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Zs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��fs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��es�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��ds�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�csyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�be�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��ae� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��ms�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�lsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�ke�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��je� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�iqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�hmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�gs� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�tqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�smsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�rq�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�qssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�ps� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��os�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��ns�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��zs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��ys�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��xs�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�wsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�ve�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��ue� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t� sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��~e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�}qw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�|ms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�{s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�qw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�ms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�q�i Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�ss Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624�� s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058�� s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t� sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y� e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270�� e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�qw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�ms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r� qw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�ms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�q�i Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�ss Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��"s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��!s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058�� s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t� sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y� e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270�� e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��)s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�(sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�'e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��&e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�%qw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�$ms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�#s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�0qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�/msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�.q�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�-ss Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�,s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��+s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��*s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��6s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��5s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��4s�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�3syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�2e�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��1e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��=s�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�<syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�;e�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��:e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�9qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�8msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�7s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�DqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�CmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�Bq�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�AssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�@s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��?s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��>s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��Js�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Is�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Hs�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�GsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Fe�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Ee� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��Qs�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�PsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Oe�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Ne� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�MqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�LmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�Ks� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 e �r+��V��: � � e D� � de133553b72273258b6a99609593572620371fffa43173a2338c8558bfa99e7eD� � a3f82abae1cfa7453d9b8553062e87caf6acf5fab2d57ec6ba1cd09335b548f8D� � 44c332e4f12eed26da249463f404e2a9b0a26965d3864059eabafa8b359ad304D� � c2dee3fc80a476ec4b0960d8a193508056f424e74141e414c57914a3c8f07e86D� � 0f15bf4e21cca58586fae47893052796624bb20d948f2087a88fa6589059216aD� � 86d37b5ad18b07654ecb4a92153db1f1929859e2e00c1a74b0455e6a33a22949D� � db707f9fd1fe35154ab4047938dc0ffe4a07327789e176680886a697d796b61eD� � bd606511a1c296702ecfd01d1fa8f5651c4c51d34d4f242cd3fe75de4b25c299D� � 5e7fbcbc653f613c746c3e1bb2b62d8fcc19ac0cf1d92487882d5541de4284c0D� � ae2e332cb8ed86d6de74c580f47de47f6f0d33330807f898fad3b7a0b8ffa440D� � 728ac150acc4c81d235b89af0449b11ae268d8c5ea5df6ca8b54c4f90b3deb7cD� � d2cc1f66c9ca4847924aa950f6bf6e884b94331ad97c0150bd241fccb76ae118D� � 1dcd5933cc511b7268b7c46d30ee331788e825ef5dc6aeefc373ae7708e575f7 N m�X�4 � N r�XqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�WmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�Vq�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�UssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Ts� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Ss�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Rs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��^s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��]s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��\s�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�[syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Ze�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Ye� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��es�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�dsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�ce�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��be� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�aqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�`msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�_s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�lqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�kmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�jq�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�issFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�hs� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��gs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��fs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��rs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��qs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��ps�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�osyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�ne�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��me� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��ys�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�xsyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�we�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��ve� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�uqwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�tmsCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�ss� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r� qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�~q�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�}ssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�|s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��{s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��zs�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��s�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� �� s�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t� syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y� e�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270�� e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r� qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�q�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�ssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��s�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��!s�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t� syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y� e�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270�� e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r� qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n� msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�(qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�'msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�&q�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�%ssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�$s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��#s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��"s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��.s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��-s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��,s�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�+syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�*e�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��)e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��5s�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�4syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�3e�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��2e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�1qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�0msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�/s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�<qw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�;ms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�:q�i Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�9ssFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�8s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��7s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��6s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��Bs�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��As�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��@s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�?sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�>e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��=e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��Is� Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�Hsy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Ge� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Fe� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�Eqw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Dms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�Cs� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�Pqw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Oms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�Nq�i Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�Mss Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Ls� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Ks�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Js�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 e �r+��V��: � � e D�* � 44d06a1ca389cc452e21dee550e31d9247c635c403355f8fa7df144b76f7ee8eD�) � d8dd9b50628f10da8aacac180c1d67e558c1ea21f01087d813dcd0249e74edbdD�( � b4cbf615b36395073b874a9c133a8bf54fd76e3016b591c08aa9bb4e0bc70679D�' � 7c3a5727b1fac7e2de0318d8d80ec9c79f8d4817cde856564f2029e02691769fD�& � c480e3a1a9b563578db18be5b147c32561044872ed18447819bf430f2cde21c2D�% � 2a85a789f09834655fede0beff4a30eea8c21356b1669e49795509c63d513254D�$ � 82c766a327f786b1d8e1cf34a5ed50e63b48ed813b1e42b1cdf8bdbe7d349866D�# � f37f01eec61a287a1271577470666ad9b985aa271aa8eec00beb21627c77dd76D�" � 589b285340071ac5a04d6fc61453fbc9ef5c7d6c4d24c934c944d51787ae5966D�! � 163f0d23cfe8fd01038ccb7746a4af46b5d8859204698181d3dcc73e81d8fb94D� � ae74b02c469234e1874d6852f03edc12b68b262ee96a49590345a04f69d92c18D� � 4e2fdfb11cf1f7b0f724741e7730e02c2e6ab6bc2b306bf41ace3283e2b8739bD� � 1661002b4d684efd2898ed72901055d3f780eab559156150f5421b5f448d823d Z {��� � Z ��Vs�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Us�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Ts� Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�Ssy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Re� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Qe� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��]s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�\sy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�[e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Ze� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�Yqw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Xms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�Ws� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�dqw Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�cms Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�bq�i Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�ass Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�`s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��_s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��^s�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��js�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��is�- Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��hs� Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�gsy Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�fe� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��ee� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��qs�!Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�psy!Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�oe�!Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��ne� !Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�mqw!Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�lms!Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�ks� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�xqw"Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�wms"Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�vq�i"Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�uss!Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�ts� !Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��ss�-!Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��rs�-!Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��~s�-"Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��}s�-"Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��|s�"Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�{sy"Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�ze�"Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��ye� "Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��s�#Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�sy#Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�#Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� #Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�qw#Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n� ms#Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�s� "Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r� qw$Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n� ms$Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,� q�i$Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q� ss#Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�s� #Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-#Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-#Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��s�-$Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-$Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��s�$Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�sy$Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�$Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270�� e� $Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��s�%Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�sy%Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�%Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� %Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�qw%Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�ms%Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�s� $Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r� qw&Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n� ms&Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,� q�i&Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q� ss%Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419� s� %Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-%Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-%Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��&s�-&Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��%s�-&Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��$s�&Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�#sy&Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�"e�&Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��!e� &Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��-s�'Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�,sy'Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�+e�'Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��*e� 'Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�)qw'Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�(ms'Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�'s� &Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�4qw(Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�3ms(Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�2q�i(Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�1ss'Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�0s� 'Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��/s�-'Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��.s�-'Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��:s�-(Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��9s�-(Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��8s�(Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�7sy(Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�6e�(Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��5e� (Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��As�)Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�@sy)Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�?e�)Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��>e� )Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�=qw)Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�<ms)Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�;s� (Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�Hqw*Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Gms*Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�Fq�i*Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�Ess)Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Ds� )Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Cs�-)Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Bs�-)Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��Ns�-*Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Ms�-*Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Ls�*Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�Ksy*Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Je�*Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Ie� *Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��Us�+Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�Tsy+Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Se�+Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Re� +Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�Qqw+Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Pms+Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�Os� *Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 e �r+��V��: � � e D�7 � 87b4bf85d74acb5f568e2cb39c5b3f1c972eba5db5f0219021c385fcf2d29732D�6 � c80cdecf0a4d4edc4e52f018171be3aaff999a6abe4579401f05dcf51a2e2586D�5 � 425b1c0988b4a82a7edad5a994ae16e7775d36d9efe1e2cfab48f0893276a38cD�4 � 2790ee1f2222b6bacc39245756529d819aa586d22b8f921a30392fabf1e845ccD�3 � 6b9b9395896aada874edc170d344039f28e922ef896e327a1058aac608e3bf71D�2 � f759508ca587ecc4ba720b9a7958780468e4b3259069514d52bbb9963d29f17eD�1 � 3d16cbc8797f49fcd4f8fd66dcd9abf0441a825f9ad6028f0548e6003c0e2366D�0 � 547b0510681fd163f611bd36836750eb87f43894c5f7c7b2578765bbcce090bdD�/ � 9408ed4cf3bb74bfe932474193ada99007d34cf9c767bbc2acddae99d4db12feD�. � 017e2d09736a9888ed8e38dca3b1a005fcfebb65e0d3d31617fa9ba35f62526dD�- � 7af718b81b8f45b39e82ed35fcd1065c8dd2f178f9310777598dc5f3544dd695D�, � bdc8ab95aa96bf3f851a6cd97f2d9c878fe34101ff383e7ab7f2c5eb11a13d78D�+ � f0264bd6f2bbb5db07d005243d60a13920c116e9e1b122e88fab4886f3ff1bc8 N m�X�4 � N r�\qw,Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�[ms,Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�Zq�i,Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�Yss+Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Xs� +Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Ws�-+Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Vs�-+Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��bs�-,Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��as�-,Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��`s�,Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�_sy,Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�^e�,Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��]e� ,Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��is�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�hsy-Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�ge�-Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��fe� -Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�eqw-Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�dms-Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�cs� ,Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�pqw.Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�oms.Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�nq�i.Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�mss-Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�ls� -Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��ks�--Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��js�--Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��vs�-.Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��us�-.Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��ts�.Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�ssy.Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�re�.Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��qe� .Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��}s�/Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�|sy/Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�{e�/Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��ze� /Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�yqw/Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�xms/Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�ws� .Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�qw0Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�ms0Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�q�i0Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�ss/Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419� s� /Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-/Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��~s�-/Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z �� s�-0Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624�� s�-0Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��s�0Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�sy0Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�0Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� 0Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��s�1Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�sy1Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�1Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� 1Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r� qw1Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n� ms1Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417� s� 0Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 � m�X� � �$�� �=2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233q�ss1Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�s� 1Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-1Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-1Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 T Q�� � T z� y2Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �Q2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� �2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�� �K2Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 , ����S , �#�"� �=3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��!� � 3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �G3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g� yY2Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733�� y�72Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g� w[2Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860 Z R�� � Z y�(w3Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�'� �Q3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��&� �3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��%� �%3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��$� �+3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�#� �K3Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��-� �%4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��,� �+4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�+� �K4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�*� �=4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�)u[3Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��4� �%5Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�3yY4Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��2y�74Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�1w[4Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�0y4Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�/� �Q4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��.� �4Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��;w�5Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�:yY5Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��9y�75Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�8w[5Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�7y5Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�6� �Q5Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��5� �5Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�?�Q6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �>� 6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�=wc5Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�<w�5Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�Bc�M6Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�Ac�A6Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�@�/6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�G� �=6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��F� � 6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�E�G6Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Dcc6Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Cc�6Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��L� � 7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�K�G7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Jcc7Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Ic�7Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Hc�M7Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��Q� �7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��P� �%7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��O� �+7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�N� �K7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�M� �=7Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 e �r+��V��: � � e D�D � f5037b5658870caf9db57fef7e511d690b1959170ab11cfda5aa83f814633ba2D�C � 17166fc5096e5f62c88e7eff8f2e850bf452600e5d52eaf11a1dff4bc21c285fD�B � 6ddc8fea6aac5d2cf395f1d06506d529fc6fde104aa7ced09ed3d16f8996db76D�A � 50c11af52b9c7aba5a74a2beb07e802550af036c3a37feb00b9bfca7b241ffa1D�@ � 3f5208ad5e6d40b1cdbd818874e03c204f1a94371bda2f9525511fe0a0803522D�? � 91c532ed3ffc0c3a3ff8c2e0c2f2eea28b1497fd586422e4640ae48504011029D�> � 53dc9de016bb6fc2c1a005c20044580f8d5de2f99f77df7527b054e08cb02e1eD�= � ba3679dbdaf62ecae1a485bd198e4127a1c7605fffa6492fb32ed97c97eff892D�< � c13dc951f499e2d4af158a7e69ac636e75289d333b51e67cf3b6c1c3b573e7dfD�; � 553cb086c6ccc5df943b00d1342272a201f6f00d3833176eb02708135da3101eD�: � 27bc90124c2fa6f18a9edb3748c392b723f315a736b6b34038195625871ecf2bD�9 � abb495131866830ec1e5474b69876de363e44c471e7221b10ce992f1f526f966D�8 � 4aea4b143d8173155f3ca2e53011c25de372518c46da064056b3507555cdc03a A � h A �#�V� �=8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��U� � 8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�T�G8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Scc8Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Rc�8Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�[� �Q8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��Z� �8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��Y� �%8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��X� �+8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�W� �K8Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� 7�B 8�I 9�P ;�V <�] =�d >�j ?�q @�x A�~ B� C� D� E� F� G�& H�- I�4 J�: K�A L�H M�N N�U P�\ Q�b R�i S�p T�v U�} V� W� X� Y� Z� [�" \�( ]�- ^�4 _�; `�? a�B b�G c�L d�Q f�V g�[ i�_ j�b k�g l�m m�r n�x o�} p� q� r� s� t� u� v�! w�& x�+ y�/ z�2 {�7 |�= }�B ~�H �M ��T ��[ ��_ ��b ��g ��l ��q ��v ��{ �� �� �� �� �� �� �� ��$ ��+ ��/ ��2 ��7 ��< ��A ��F ��K ��O ��R ��W ��] ��b ��h ��m ��t ��{ �� �� �� �� �� �� �� �� � �r � �'�_�Q9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �^� 9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�]�Y9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�\�9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�bc�M9Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�ac�A9Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�`�/9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�g� �K:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�f� �=:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�e�G9Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�dcc9Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�cc�9Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�mw[:Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�ly:Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�k� �Q:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��j� �:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��i� �%:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��h� �+:Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�r� �=;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��q� � ;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�p�G;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�oyY:Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��ny�7:Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�xw;Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�w� �Q;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��v� �;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��u� �%;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��t� �+;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�s� �K;Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��}� �%<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��|� �+<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�{� �K<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�z� �=<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�yu[;Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��� �%=Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�yY<Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7<Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[<Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� y<Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �Q<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��~� �<Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E �� w�=Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g� yY=Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733�� y�7=Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[=Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�y=Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �Q=Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� �=Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'��Q>Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� >Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k� wc=Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~� w�=Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�c�M>Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A>Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/>Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�� �=>Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � >Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G>Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc>Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c�>Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � �� � � ?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc?Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c�?Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�M?Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��!� �?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*� � �K?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#� � �=?Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�&� �=@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��%� � @Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�$�G@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�#cc@Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�"c�@Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�+� �Q@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��*� �@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��)� �%@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��(� �+@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�'� �K@Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'�/�QAJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �.� AJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�-�YAJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�,�AJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�2c�MAPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�1c�AAPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�0�/AJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�7� �KBJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�6� �=BJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�5�GAJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�4ccAPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�3c�APeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�=w[BRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�<yBRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�;� �QBJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��:� �BJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��9� �%BJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��8� �+BJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�B� �=CJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��A� � CJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�@�GCJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�?yYBRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��>y�7BRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�HwCRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�G� �QCJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��F� �CJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��E� �%CJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��D� �+CJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�C� �KCJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��M� �%DJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��L� �+DJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�K� �KDJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�J� �=DJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�Iu[CRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��T� �%EJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�SyYDRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Ry�7DRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Qw[DRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�PyDRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�O� �QDJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��N� �DJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 e �r+��V��: � � e D�Q � 72b814596920effa935ebdde082d64181b5aa2f44485a058f2535c54828f931eD�P � f85c959b9b36039c3d4707a5c1e73243be76f1191f9b467bae50a18a9612af31D�O � 660894a2c18d390472d0f133b53c845c1ecffde9327004870721603cd1f91b48D�N � 64a62730fee8363341816507f9171c57a6c6433b7c7418501dbfc6686c446190D�M � 31e074062d36f692f0ee2ec64a68e0193b540bf85cc09b3fd7a6f3384ab55806D�L � 121ae3d3bc314678d6d4591403f12a7aac992b4097837f5c93e9dfa346814e6bD�K � 92d5b94aea2121671cd099763736607349b3607d2d2e2e681811cd2f4c86ba88D�J � 06444e0746003a76118ae6a9895e5592ab3c18c2bf85ab614b50a43dd56980b9D�I � ccaed81377566681009e212ad6067bf7a462c3a7df25aa078d71854dc61496baD�H � 6fa281a1277a0474df3c2033953900cb085700242c41a44cda525992e8b7c5c6D�G � 51c06da7ce2ef116cd43474b64056e939ccb0ae0e6198dd907ee842fdc5005b9D�F � ba8057e4e0424cbc1521c650fa3a07edba34cbd8e90391f5273ce5c22d55e305D�E � 445eab0d09b92ba9a49ba8c3bfd3c3eee915acfbb0d71c89b249baf899d7fcb2 E m�>�9 � E ��[w�ENicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�ZyYERobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Yy�7ERobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Xw[ERobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�WyERobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�V� �QEJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��U� �EJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�_�QFJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �^� FJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�]wcENicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�\w�ENicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�bc�MFPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�ac�AFPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�`�/FJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�g� �=FJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��f� � FJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�e�GFJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�dccFPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�cc�FPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��l� � GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�k�GGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�jccGPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�ic�GPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�hc�MGPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��q� �GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��p� �%GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��o� �+GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�n� �KGJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�m� �=GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�v� �=HJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��u� � HJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�t�GHJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�sccHPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�rc�HPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�{� �QHJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��z� �HJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��y� �%HJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��x� �+HJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�w� �KHJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'��QIJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �~� IJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�}�YIJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�|�IJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�c�MIPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�AIPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V� �/IJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�� �KJJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�� �=JJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"��GIJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ccIPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c�IPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g� w[JRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� yJRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.� � �QJJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � �JJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%JJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+JJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�� �=KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��GKJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�yYJRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7JRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�wKRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�� �QKJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� �KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �KKJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � �� � �%LJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+LJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�� �KLJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�� �=LJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�u[KRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��$� �%MJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�#yYLRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��"y�7LRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�!w[LRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� yLRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.� � �QLJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � �LJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��+w�MNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�*yYMRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��)y�7MRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�(w[MRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�'yMRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�&� �QMJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��%� �MJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�/�QNJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �.� NJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�-wcMNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�,w�MNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�2c�MNPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�1c�ANPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�0�/NJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�7� �=NJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��6� � NJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�5�GNJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�4ccNPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�3c�NPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��<� � OJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�;�GOJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�:ccOPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�9c�OPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�8c�MOPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��A� �OJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��@� �%OJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��?� �+OJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�>� �KOJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�=� �=OJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�F� �=PJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��E� � PJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�D�GPJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�CccPPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Bc�PPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�K� �QPJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��J� �PJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��I� �%PJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��H� �+PJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�G� �KPJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'�O�QQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �N� QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�M�YQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�L�QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�Rc�MQPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�Qc�AQPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�P�/QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�W� �KRJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�V� �=RJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�U�GQJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�TccQPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Sc�QPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 e �r+��V��: � � e D�^ � 9cd2077252d68212f08dd81f3353a8d296b4983fd631071221ad12978b80e2d3D�] � fa40075494cdb791de80bb9dd16a60c61c5e4200559523fc4cb22ded671eda5aD�\ � 9df3dd0592a54ada722f373efb2ba882dada990b05e08814608a1d5fb236de64D�[ � 1b5fd99f401b83a160bcf8506fd135056203e2df730c72f49440fe457a1ec20eD�Z � 3d0d4dbcbdb1f804aa9e133124ebb735a5037654221d45f8e93d4e81c3cc2f75D�Y � ce893faa55582d8281001d9876f4ceaddca9de5adf25f32692196a6e85a1aa48D�X � 4c3662507f01c062009127bb3ab45ab19236e6dcc70fe08ca363713b45cf9229D�W � fede7faa428def30a78d440b2dfd020e0a972bca7601dbd552274dc2f98434c9D�V � c03ba838a367a50725a5bad5793e263d9c1c7d7e962a29cd8e0b093cf5a0056dD�U � c30d6ca286d3a7294da3e5596cf791d5c1314667173d02f21d751e689e05d52bD�T � 2543d29db08633a435d64df84ea00c6bdfb481a55fd6621a7e31190ab94c1ddfD�S � 783b344765a19ddce5583dff7a5df7639ac3de2a002a21d71a0528d6aaae8258D�R � d80f9a89dac504f4ac37f8ea511d7ea892e9a02e191b8bf374506a66f6ff3395 � a�2� � g�]w[RRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�\yRRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�[� �QRJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��Z� �RJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��Y� �%RJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��X� �+RJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�b� �=SJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��a� � SJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�`�GSJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�_yYRRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��^y�7RRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�hwSRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�g� �QSJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��f� �SJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��e� �%SJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��d� �+SJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�c� �KSJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��m� �%TJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��l� �+TJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�k� �KTJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�j� �=TJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�iu[SRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��t� �%UJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�syYTRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��ry�7TRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�qw[TRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�pyTRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�o� �QTJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��n� �TJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��{w�UNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�zyYURobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��yy�7URobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�xw[URobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�wyURobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�v� �QUJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��u� �UJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'��QVJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �~� VJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�}wcUNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�|w�UNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�c�MVPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�AVPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V� �/VJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�� �=VJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � VJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��GVJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ccVPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c�VPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � �� � � WJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �GWJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� ccWPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r� c�WPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�MWPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��� �WJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%WJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+WJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �KWJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#� � �=WJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�� �=XJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � XJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��GXJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ccXPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c�XPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�� �QXJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� �XJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%XJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+XJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �KXJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'� �QYJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� � � YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+� �YYJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J� �YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�"c�MYPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�!c�AYPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V� �/YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�'� �KZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�&� �=ZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�%�GYJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�$ccYPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�#c�YPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�-w[ZRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�,yZRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�+� �QZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��*� �ZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��)� �%ZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��(� �+ZJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�2� �=[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��1� � [Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�0�G[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�/yYZRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��.y�7ZRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�8w[Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�7� �Q[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��6� �[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��5� �%[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��4� �+[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�3� �K[Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��=� �%\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��<� �+\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�;� �K\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�:� �=\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�9u[[Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��D� �%]Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�CyY\Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��By�7\Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Aw[\Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�@y\Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�?� �Q\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��>� �\Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��Kw�]Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�JyY]Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Iy�7]Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Hw[]Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�Gy]Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�F� �Q]Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��E� �]Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�O�Q^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �N� ^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�Mwc]Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�Lw�]Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�Rc�M^Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�Qc�A^Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�P�/^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�W� �=^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��V� � ^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�U�G^Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Tcc^Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Sc�^Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 e �r+��V��: � � e D�k � 7999b3417dab3aca80a1f8a57c6a7b9f98efab7f9c530e0131e8ee2cbd026459D�j � 42ea2b85b1cebb4239ade45fc36a1b309a29b95be50d26bf314165428aeb66acD�i � f659cc4a3ded31fe85ee2123860696b26f1983182f66c76b6a76d0e5dc5f3d2fD�h � 035b347d3201307242fcde833202a8aa1505b93cbfed75f9f4aa400f16f19cefD�g � c4c001caa89f5bff6fb1c4dbee4050dbbb93bd7c79c16d2c309103992c0b7987D�f � 104ab2ef65171e91197d612304922a2a41a03bb8e9cbd65666f2899ffca2d489D�e � 6629074551d9fb3315ab487254009bfbf5ff68dc9d1c73b4aa5c866e5448129cD�d � eeb0a2f82f3dc57694d35b3eaf181212193a3ecdcce63837ee1d869a138901d0D�c � 1ffc8e6c986e1cc0d0bec287cc7ad4bbb77cd0ccc1bcb147a4d5be35dbe062eaD�b � 311a90d5eda02bf4ce86639848bc226ee6a17f1a66b1f15375a48b77a3d6b9acD�a � 5d260748ee7254fcf65c3e3312e541e2f9883d21279926f45ee85ad44eb5b4e7D�` � 7709c0d2acd7ad42cb32f7de9cac262193958bda0a1f863ea37484f52147282aD�_ � 62597c6811ab1a4372c93868c223a056ac2947a911f6b318ab3df4ead1b06de3 � %/�% � ��\� � _Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�[�G_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Zcc_Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Yc�_Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Xc�M_Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��a� �_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��`� �%_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��_� �+_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�^� �K_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�]� �=_Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�f� �=`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��e� � `Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�d�G`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ccc`Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�bc�`Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�k� �Q`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��j� �`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��i� �%`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��h� �+`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�g� �K`Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'�o�QaJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �n� aJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�m�YaJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�l�aJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�rc�MaPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�qc�AaPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�p�/aJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�w� �KbJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�v� �=bJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�u�GaJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�tccaPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�sc�aPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�}w[bRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�|ybRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�{� �QbJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��z� �bJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��y� �%bJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��x� �+bJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�� �=cJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � cJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �GcJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�yYbRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��~y�7bRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�wcRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�� �QcJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� �cJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%cJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+cJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �KcJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � �� � �%dJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+dJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+� � �KdJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$� � �=dJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f� u[cRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��� �%eJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�yYdRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7dRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[dRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�ydRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �QdJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� �dJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��w�eNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�yYeRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7eRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[eRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�yeRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �QeJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� �eJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'� �QfJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� � � fJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k� wceNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~� w�eNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�"c�MfPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�!c�AfPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V� �/fJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�'� �=fJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��&� � fJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�%�GfJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�$ccfPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�#c�fPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��,� � gJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�+�GgJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�*ccgPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�)c�gPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�(c�MgPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��1� �gJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��0� �%gJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��/� �+gJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�.� �KgJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�-� �=gJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�6� �=hJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��5� � hJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�4�GhJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�3cchPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�2c�hPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�;� �QhJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��:� �hJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��9� �%hJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��8� �+hJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�7� �KhJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'�?�QiJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �>� iJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�=�YiJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�<�iJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�Bc�MiPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�Ac�AiPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�@�/iJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�G� �KjJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�F� �=jJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�E�GiJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�DcciPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Cc�iPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�Mw[jRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�LyjRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�K� �QjJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��J� �jJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��I� �%jJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��H� �+jJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�R� �=kJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��Q� � kJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�P�GkJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�OyYjRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Ny�7jRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�XwkRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�W� �QkJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��V� �kJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��U� �%kJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��T� �+kJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�S� �KkJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��]� �%lJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��\� �+lJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�[� �KlJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�Z� �=lJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�Yu[kRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 e �r+��V��: � � e D�x � ee54ecaecccdbbb8de156e19a27d770e04d61778a19ef2dc30478b7fcfe65865D�w � 664f64a4a6b87e761d7b0bc0efba577178e77a23ec390ffb222b9caee6c3206aD�v � 557d4fb63564285a746012864ee4fa67be9d0f1756df5771b7f9380de46393c5D�u � 61afac8f37a4ea3ff4615ff2c44e669f884f9d092a45699fc0fd2dcac09465d8D�t � 82932d0635147c1a6bbad3358a167d3e6f1a59a1ee3cce64d41ef8729a3f2993D�s � ebce0b46fb13981f4746adf603b6f96c83356c88ae4ed0053fdb5b506fbb97b1D�r � 63c3055a3e9d4079dcbfedfed3e049509ed10bdc0f3de7959902ff8cfcec5e9fD�q � 05a40b72da0cf303bc79e3b58cda8c7f7edb3f19a201eca57225af9a1e012bebD�p � c7a38de9170db3ea671c715e4f878f1c3731c4a067bcb77c2c9827c8cd02d694D�o � 1a506ab0d1bb5fe446384f454d2e3cccb4d626df0d87e0effd61680d6a9d026bD�n � e769db0a6566751d86087f44601cb2aedbda527c4a514beaa8e8a1f4a9d2d02eD�m � bcebc5d5ae20b6fbf0a5f35a2831414d8ad7aa1ea1720883560416fbd5db15b7D�l � a4e5c86a1cca9f1fc22a2b9ee7b057a8c3cf9a4e26ee74373e8878ad6288731a 3 m�>�9 � 3 ��d� �%mJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�cyYlRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��by�7lRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�aw[lRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�`ylRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�_� �QlJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��^� �lJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��kw�mNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�jyYmRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��iy�7mRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�hw[mRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�gymRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�f� �QmJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��e� �mJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�o�QnJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �n� nJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�mwcmNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�lw�mNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�rc�MnPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�qc�AnPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�p�/nJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�w� �=nJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��v� � nJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�u�GnJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�tccnPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�sc�nPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��|� � oJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�{�GoJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�zccoPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�yc�oPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�xc�MoPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��� �oJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%oJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+oJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�~� �KoJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�}� �=oJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�� �=pJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � pJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��GpJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ccpPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c�pPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-� � �QpJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � �pJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%pJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+pJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �KpJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 of !flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��' ��- ��2 ��8 ��= ��D ��K ��O ��R ��W ��\ ��a ��f ��k ��o ��r ��w ��} �� �� �� �� �� �� ��" ��' ��, ��1 ��6 ��; ��? ��B ��G ��M ��R ��X ��] ��d ��k ��o ��r ��w ��| �� �� �� �� �� �� �� ��" ��( ��- ��4 ��; ��? ��B ��G ��L ��Q ��V ��[ ��_ ��b ��g ��m ��r ��x ��} �� �� �� �� �� �� ��! ��& ��+ ��/ �2 �7 �= �B �H �M �T �[ �_ �b �g �l �q �v �{ � � � � � � � �$ �+ �/ �2 �7 �< �A �F �K �O � �r � �'��QqJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� qJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+� �YqJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J� �qJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�c�MqPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�AqPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/qJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�� �KrJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�� �=rJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"��GqJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ccqPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c�qPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g� w[rRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� yrRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �QrJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� �rJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%rJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+rJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�"� �=sJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��!� � sJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �GsJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g� yYrRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733�� y�7rRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�(wsRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�'� �QsJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��&� �sJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��%� �%sJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��$� �+sJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�#� �KsJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��-� �%tJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��,� �+tJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�+� �KtJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�*� �=tJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�)u[sRobbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��4� �%uJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�3yYtRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��2y�7tRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�1w[tRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�0ytRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�/� �QtJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��.� �tJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��;w�uNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�:yYuRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��9y�7uRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�8w[uRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�7yuRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�6� �QuJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��5� �uJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�?�QvJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �>� vJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�=wcuNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�<w�uNicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�Bc�MvPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�Ac�AvPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�@�/vJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�G� �=vJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��F� � vJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�E�GvJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�DccvPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Cc�vPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��L� � wJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�K�GwJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�JccwPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Ic�wPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Hc�MwPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��Q� �wJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��P� �%wJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��O� �+wJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�N� �KwJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�M� �=wJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�V� �=xJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��U� � xJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�T�GxJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�SccxPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Rc�xPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�[� �QxJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��Z� �xJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��Y� �%xJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��X� �+xJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�W� �KxJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 e �r+��V��: � � e D� � e319773b66bb4f0227b1608807845710d392639797e4f0e6714024b71cb7b1f7D� � 56b6f928a45667b9da2599adf7728717580afc5e3ce24bbe5dfa41d4e9881447D� � 648913500d3bbad2fc637cb3b8d8bfeafa3a89bbf0fb33504657bab719b25763D� � bd9209ce7471aae3638a5d0464764e35ae7dd88dd1526747997c8bbec7ceb786D� � bd55b6e53bef2770d4702bf6fb6bcd13145e761a809da1a07423a7e1e3898f82D� � de291c1622d5eebba6a97c0060a631087ecd9651815e7294c243b6f31e580508D� � ec3383b51ed106826513f9c2945df6ff25b528b122a9b848b069c9e8d6cb5e46D�~ � b929a42b8d0177a7813b33484e7fc53ee017c678c48081d067dcde010be775d9D�} � 70d313100de0a9a28bad9868e3267b01f56634e7b633d7519f3153020d8c77b7D�| � 82b2eaccefb7228d0de8dd9a88417b5a3b5cd4911bacf3931b092c0c35f16e7aD�{ � 88e98b9e84008f81960ec7ef7833a591eded866cb407e6fef47c13d1ecb21d53D�z � 8ee9327d2fb76742bd611491c6f916eebd397da0976737f7b48eec36a25080b9D�y � f2ef03a6ec5037c50e7f13a6a7c2465e14b247e48ec9b158e91bbf86094e3dd1 � �r � �'�_�QyJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �^� yJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�]�YyJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�\�yJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�bc�MyPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�ac�AyPeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�`�/yJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�g� �KzJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�f� �=zJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�e�GyJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�dccyPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�cc�yPeter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�mw[zRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�lyzRobbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�k� �QzJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��j� �zJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��i� �%zJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��h� �+zJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�r� �={Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��q� � {Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�p�G{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�oyYzRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��ny�7zRobbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�xw{Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�w� �Q{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��v� �{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��u� �%{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��t� �+{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�s� �K{Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��}� �%|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��|� �+|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�{� �K|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�z� �=|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�yu[{Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��� �%}Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�yY|Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7|Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[|Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� y|Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �Q|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��~� �|Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E �� w�}Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g� yY}Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733�� y�7}Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[}Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�y}Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �Q}Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� �}Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'��Q~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� ~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k� wc}Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~� w�}Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�c�M~Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A~Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�� �=~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � ~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G~Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc~Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c�~Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � �� � � Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c�Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�MPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��!� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*� � �KJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#� � �=Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�&� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��%� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�$�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�#cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�"c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�+� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��*� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��)� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��(� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�'� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'�/�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �.� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�-�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�,��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�2c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�1c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�0�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�7� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�6� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�5�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�4cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�3c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�=w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�<y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�;� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��:� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��9� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��8� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�B� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��A� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�@�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�?yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��>y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�Hw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�G� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��F� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��E� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��D� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�C� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��M� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��L� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�K� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�J� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�Iu[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��T� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�SyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Ry�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Qw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�Py�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�O� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��N� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��[w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�ZyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Yy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Xw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�Wy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�V� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��U� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�_�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �^� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�]wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�\w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 e �r+��V��: � � e D� � 36aad460808510bfa2e38f113711d7d1b1ec88d77ddb1badbedd8829e5c8dd02D� � 456aa067cc96e03aaa605e52a86cc973f7a8dab09337cce112097a4608dd143aD� � c4bb36e81ea1d28a9b054d4a06f11d8ff53cc6d3f1e8523504685e0998b38dd6D� � 27bf800e475fe735de26f8983bba34eab9261ed1b48593690d77e5bc7d0acde1D� � 93a54cb9f013c14a0d42bbb9abed4ec7186612d1288e74148ff8fa20ccc973a6D� � 2445bee7e1332244f8b40961bfe9f59880197fd2e4ea9800c0b288239d229acbD� � 6c1525a5d4f0e9045c028f3d1abe0c4e7e9aa2e3216a1472b79d3f60b02d135dD� � e0b87fa8a61f451d3299d6569707241d3342eab4af1de892fd6bf8e03d5551d8D� � 4bb74807b09db308a56c244e21970f4698de871955175c9b552234229de92f91D� � dc1039bae026e06f606e2a26e159743f3cf3ed19a75609cb5664372c17b4d90cD� � 4011ecba5e1b135d1f741f84948ead212a82a060f0cf75bab01b2a37fdd319c0D� � 504528b2f64bf9e246a93ff851b9fbf624d77355d1d57587ae1acaa4522c8fcbD� � fa679cc7ff7900d485618ebb16638390e1b2e4a43f1278263dc8722680e307ab v &Q v �W�bc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�ac�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�`�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�g� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��f� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�e�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�dcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�cc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��l� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�k�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�jcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�ic��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�hc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��q� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��p� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��o� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�n� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�m� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�v� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��u� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�t�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�scc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�rc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�{� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��z� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��y� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��x� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�w� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �~� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�}�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�|��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V� �/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g� w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � �� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��$� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�#yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��"y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�!w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��+w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�*yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��)y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�(w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�'y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�&� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��%� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�/�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �.� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�-wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�,w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�2c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�1c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�0�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�7� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��6� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�5�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�4cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�3c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��<� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�;�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�:cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�9c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�8c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��A� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��@� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��?� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�>� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�=� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�F� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��E� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�D�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Ccc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Bc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�K� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��J� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��I� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��H� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�G� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'�O�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �N� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�M�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�L��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�Rc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�Qc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�P�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�W� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�V� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�U�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Tcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Sc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�]w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�\y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�[� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��Z� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��Y� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��X� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�b� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��a� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�`�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�_yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��^y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 e �r+��V��: � � e D� � 81c536f389863d868ed8bc21eae1b2225ce8631429c5df133d0e769c3f340f77D� � 324c9d5ad49eb48866d128a022079508c40c45aa4d4176abc382f606369448d0D� � 7179cfedeaf917db1ff4e9e2c9261746c977c39ff98d06e7bed342cca2633c45D� � 9eb8a6c91f46c6b191c972052582bf84913f5b8b77d733b9a22599022ce86a8bD� � 20d48e214a59a2848b7152ea8c378eda0ab10d93902bef3627ec70603b8ad96fD� � 1b94bec42529799dff727dd6082c4b038c96227041b81d95f21ee5457cb4c089D� � 4ed29d175fb03385533dbaacc9824611743ebcc84d3ce5fa6f376a5568058d49D� � 9a5aad884099ccb669c4d020f69ddfec584bec4cb676f93818cd67346ee348d0D� � 7d9adf9e27536faf7c726121ff0e58d8a0d0c473168713c55c95d74da74c2ebfD� � 938086442b2d90233bb54c18a12a65965685e408b96dafa4e36c18a4179676dfD� � 0d89f6cb70bf9117dfd174a86c11de319ac44c664effcaa3b959f00d436ae1a2D� � 92dc223c986a6952b0510b50be70d54b8def042975f883b9a1ecb8d0f62a138bD� � f566582c4354cf859dbaad8604aeac5c8344f7e81c02de69fe4124ea1537501c Z R�� � Z y�hw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�g� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��f� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��e� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��d� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�c� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 4 ��h�9 � 4 ��oy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�nw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�my�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�l� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��k� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��j� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240f�iu[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 � � � � � �'�u�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �t� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�swc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�rw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460��qw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�pyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733 v &Q v �W�xc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�wc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�v�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�}� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��|� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�{�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�zcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�yc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�~c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+��Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J���Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�#w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�"y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�!� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�(� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��'� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�&�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�%yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��$y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�.w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�-� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��,� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��+� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��*� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�)� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��3� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��2� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�1� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�0� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�/u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��:� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�9yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��8y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�7w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�6y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�5� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��4� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��Aw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�@yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��?y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�>w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�=y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�<� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��;� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�E�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �D� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�Cwc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�Bw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�Hc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�Gc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�F�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�M� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��L� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�K�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Jcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Ic��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��R� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�Q�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Pcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Oc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Nc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��W� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��V� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��U� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�T� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�S� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�\� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��[� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�Z�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Ycc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Xc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�a� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��`� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��_� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��^� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�]� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 e �r+��V��: � � e D�, � 7ed3fc20ba01570a826ffa2af023ade0d8581765238cc534b73fe6e9508c4bebD�+ � 6a3415f454a536cd4bddf7dbc03ff8c17e3484e1d6e9df356fd2660f6f7a96b3D�* � 2e5c474731992282d7faabe7c8d55f7253fbce05507a987f3bd332681c4e839cD�) � 97484ec3860cbfbbd5c2af0639469ee8d66a3f43238adbf11b9b14a0c86c978aD�( � 37726d4a426ccbdf697e55aa4f02f394d32283a3df6de51d99714a596409ae64D�' � e446b1822c2b1f232e747d463041aa38f581221d371740705042a6966578d818D�& � 87c30f42a079f461de618eaafd1eeb3225bf684cb0b4fe11da401f0550be3c80D�% � 3cd32436440b9a64a4f9971f907fba98209aeed82000b3d7441689e93ed58cb6D�$ � 6765ca1b27d1b3812e3c6442a00515395c3887ebcddeefb849912f45c005c54eD�# � 3ea9a16edeb166326b2db578b5d4fbc8f9700179808b798dd4c33c6f0d273beaD�" � 573cc1166190452dbe3b43b1be7bef29a1ffa0ed9f8dbfd29b063674c60834d3D�! � 78d3877b596cc832e4549e218cae35c884640fcb1d8e5764ee09a774a110fb45D� � b301b3885fb4d5b57bd90b729ff75d74dc31e2f35a8ae3b5efa64901202f1497 � �r � �'�e�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �d� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�c�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�b��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�hc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�gc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�f�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�m� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�l� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�k�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�jcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�ic��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�sw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�ry�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�q� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��p� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��o� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��n� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�x� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��w� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�v�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�uyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��ty�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�~w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�}� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��|� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��{� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��z� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�y� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 �� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g� yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��"� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�!�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r� c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W� c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��'� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��&� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��%� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�$� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�#� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�,� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��+� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�*�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�)cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�(c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�1� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��0� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��/� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��.� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�-� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'�5�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �4� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�3�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�2��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�8c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�7c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�6�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� "�W #�] $�b &�h '�o (�u )�x *�} +� ,� -� .� /� 0� 1� 2�# 3�( 4�. 5�3 6�: 7�A 8�E 9�H :�M ;�R <�W =�\ >�a @�e A�h B�m C�s D�x E�~ F� G� H� I� J� K� L�" M�' N�, O�1 P�5 Q�8 S�= T�C U�H V�N W�S X�Z Y�a Z�e \�h ]�m ^�r _�w `�| a� b� c� d� e� f� g� h�# i�* j�1 k�5 l�8 m�= n�B o�G p�L q�Q r�U s�X t�] u�c v�h x�n y�s z�z {� |� }� ~� � �� �� ��! ��% ��( ��/ ��7 ��> ��F ��M ��U ��\ ��d ��k ��r ��z �� �� �� �� �� ��' ) � � ) �+�=� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�<� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�;�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�:cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�9c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�Cw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�By�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�A� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��@� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��?� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��>� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�H� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��G� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�F�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�EyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Dy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�Nw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�M� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��L� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��K� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��J� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�I� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��S� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��R� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�Q� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�P� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�Ou[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��Z� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�YyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Xy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Ww[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�Vy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�U� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��T� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��aw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�`yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��_y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�^w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�]y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�\� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��[� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�e�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �d� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�cwc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�bw��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 e �r+��V��: � � e D�9 � 63a16686d243cda459362fe273e2bf3e64a84899038415039c265f34388b8257D�8 � 0eb359490eab964f970cb8d6fd9987a38a3e3f9c585348941c53fb1b709c71f1D�7 � a4dd90b3a38f048451db9452be71e7a4b4d0cfa945c1fb18335881ddf88355f3D�6 � f020458306c1798b97bbe293da7347160996bd9a1e89d548f4012bde28cc4a52D�5 � 86614c497d063d072a270460ce1367ee6647bfa57eb10ec1f02b27e267bfff67D�4 � 4c61a98e630cf29009706ab099ff7870c3593c7eb39e9d0edb5e059359012e52D�3 � b4fb6c1de92fa5a737add5cf91cb77255e46b3c6bd53cb56fb0440dba5b32f9dD�2 � 00608301be4450298d9a4f75fc3a36ab657c6083731a7fe1510fb0044564bb52D�1 � 81c248f72126ea7b1e33a7f47a8133ab505675f4db87438422eb0a47bb6f2bf0D�0 � 82bf486bffe227eaa4681fdcf6cb4c2225d25b5dbdad8b4009f3da4a506834efD�/ � 6457ba14ffee5554b41e56b32c8a9f8c2873e5ebe04d17cbb12e0e3e6edd3933D�. � 201819cd83614093dbe14240fec542722aadee2886e13b2006ee8f6f0c063950D�- � bbc7199164da8d3b64fe85a385ca152120db612e702d3318ac67877b9c25e534 v &Q v �W�hc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�gc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�f�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�m� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��l� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�k�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�jcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�ic��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��r� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�q�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�pcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�oc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�nc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��w� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��v� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��u� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�t� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�s� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�|� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��{� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�z�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ycc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�xc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��~� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�}� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+��Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J���Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"� �G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r� c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y� w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��#� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��"� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�!� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f� u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��*� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�)yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��(y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�'w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�&y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�%� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��$� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��1w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g�0yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��/y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�.w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�-y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�,� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��+� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'�5�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �4� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�3wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�2w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�8c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�7c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�6�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�=� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��<� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�;�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�:cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�9c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��B� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�A�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�@cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�?c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�>c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��G� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��F� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��E� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�D� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�C� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�L� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��K� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�J�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Icc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Hc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�Q� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��P� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��O� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��N� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�M� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'�U�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �T� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�S�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�R��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�Xc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�Wc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�V�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�]� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�\� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�[�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Zcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Yc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�cw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�by�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�a� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��`� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��_� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��^� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�h� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��g� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�f�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�eyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��dy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 e �r+��V��: � � e D�F � 53f42f617e8184218d75676860dfcd10bd810905d61d6d241b88ff372c208b42D�E � 3704909dce1c80a6e3fa47ea59c51797dbe73c34511a242cf1e0756e078fba23D�D � d9821c48f2918944061117f3ab8c87a78a29d2649124aeb7f47f886ec7903dd6D�C � 251baa632d0d33e46681b76fba3f93cc9ea07b9084a6dbc7bb018c50a1abb9b1D�B � 13c2180392f13ede0d3e45cf8895eb123d78ede2ff65fcaf4c05232a7cba595bD�A � dfe598bbcefc64fd6bb542cf6d1966fef6a3995e68fa2b6cc2ed34220ca65ee8D�@ � c0e72c1dbf2c72f272577dc891736d1403dd928b5e9f236721ea261f99677b61D�? � 1e1c43fd5f02a819df67f4ea70bbc1d3725d96664de7ae2da966f9456b5ececfD�> � dfcf30fce1599be0699955042c34db80273d1dc14cc38af5a8f91b02ab70060bD�= � 40778cececacdc153601f3e0bdde3c295376d9e7a17eef328a28fd1f1d7e2f2eD�< � c67c4c4063b74aae72efd079229bf2ca2167a39844fe319e3e726d3df81c4767D�; � 764b6da4f9a89bd034bdb5f3c7e3d13f7fcd081d64b01ef179ecd51b31ec0e20D�: � 82d9617a439490782837e05a5e05310b0748f064a0556d264fbc615afd85671b Z R�� � Z y�nw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�m� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��l� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��k� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��j� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�i� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��s� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��r� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�q� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�p� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�ou[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 3 m�>�9 � 3 ��z� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240g�yyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��xy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�ww[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�vy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�u� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��t� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 E m�>�9 � E ��w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.12e��- Font CVE fixes and bump SBAT (CVE-2022-2601) - Resolves: RHEL-23460g� yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�~w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�}y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�|� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��{� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � �� �'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213k�wc�Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.14e���- Rebuild for signing - Related: RHEL-23460~�w��Nicolas Frayer <nfrayer@redhat.com> - 2.02-087.el7.13e�6@- safemath: add grub_cast for gcc < 5.1 - Related: RHEL-23460 v &Q v �W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r� c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` ��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�!� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'�%�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �$� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�#�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�"��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�(c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�'c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�&�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 # � � � # l�/gu�Robbie Harwood <rharwood@redhat.com> 0.7.0-24\��@- Add a safety timeout to epoll - Resolves: #1687899y�.g� �Robbie Harwood <rharwood@redhat.com> 0.7.0-23\��- Use pthread keys for thread local storage - Resolves: #1618375q�-g�Robbie Harwood <rharwood@redhat.com> 0.7.0-22\��- Add hack to support read-only root - Resolves: #1542567{�,g��Robbie Harwood <rharwood@redhat.com> 0.7.0-21[o�- Always choose highest requested debug level - Resolves: #1505741�"�+�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�*cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�)c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 I �u�r � � I Q�7g?�Colin Walters <walters@verbum.org> 0.10.23-16Q�U@- Drop PyXML BR (#914060)N�6i7�Bastien Nocera <bnocera@redhat.com> 0.10.23-15Q8�@- Remove gmyth plugin� �5g��Robbie Harwood <rharwood@redhat.com> 0.7.0-30`�Z�- Always free ciphertext data in gp_encrypt_buffer - Resolves: #1887438w�4g� �Robbie Harwood <rharwood@redhat.com> 0.7.0-29^��- Make syslog of call status configurable - Resolves: #1373421��3g�%�Robbie Harwood <rharwood@redhat.com> 0.7.0-28]�m�- Fix double free of popt context when querying version - Resolves: #1752810��2g�+�Robbie Harwood <rharwood@redhat.com> 0.7.0-27]5�@- Update docs to reflect actual behavior of krb5_principal - Resolves: #1553094� �1g��Robbie Harwood <rharwood@redhat.com> 0.7.0-26\Ɋ@- Avoid uninitialized free when allocating buffers - Resolves: #1699331x�0g� �Robbie Harwood <rharwood@redhat.com> 0.7.0-25\�8�- Fix explicit NULL deref on some enctypes - Resolves: #1699331 ^ K�fn � ^ i�>im�Wim Taymans <wtaymans@redhat.com> - 0.10.23-23X���- Rebuild with hardened flags Resolves: #1420764� �=i�Y�Wim Taymans <wtaymans@redhat.com> - 0.10.23-22XG��- h264parse: Ensure codec_data has the required size when reading number of SPS Resolves: rhbz#1400839�"�<i�]�Wim Taymans <wtaymans@redhat.com> - 0.10.23-21XF�@- Remove insecure NSF plugin - vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400839O�;c?�Daniel Mach <dmach@redhat.com> - 0.10.23-20R�U�- Mass rebuild 2014-01-24O�:c?�Daniel Mach <dmach@redhat.com> - 0.10.23-19R�k�- Mass rebuild 2013-12-27��9g�9�Colin Walters <walters@verbum.org> 0.10.23-18Q��@- Move soundtouch-devel BR to outside RHEL conditional, since it is available there.�1�8g�}�Colin Walters <walters@verbum.org> 0.10.23-17Q�UA- Hack the gtk-doc to remove plugin docs that are not shipped - Drop mythtv, opencv sources that are no longer buildable V��i � �"�Fi�]�Wim Taymans <wtaymans@redhat.com> - 0.10.23-21XF�@- Remove insecure NSF plugin - vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400839O�Ec?�Daniel Mach <dmach@redhat.com> - 0.10.23-20R�U�- Mass rebuild 2014-01-24O�Dc?�Daniel Mach <dmach@redhat.com> - 0.10.23-19R�k�- Mass rebuild 2013-12-27��Cg�9�Colin Walters <walters@verbum.org> 0.10.23-18Q��@- Move soundtouch-devel BR to outside RHEL conditional, since it is available there.�1�Bg�}�Colin Walters <walters@verbum.org> 0.10.23-17Q�UA- Hack the gtk-doc to remove plugin docs that are not shipped - Drop mythtv, opencv sources that are no longer buildableQ�Ag?�Colin Walters <walters@verbum.org> 0.10.23-16Q�U@- Drop PyXML BR (#914060)N�@i7�Bastien Nocera <bnocera@redhat.com> 0.10.23-15Q8�@- Remove gmyth plugin�&�?i�e�Wim Taymans <wtaymans@redhat.com> - 0.10.23-24ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix the build - Resolves: RHEL-16792 Y \�F�� � Y ��Mg�9�Colin Walters <walters@verbum.org> 0.10.23-18Q��@- Move soundtouch-devel BR to outside RHEL conditional, since it is available there.�1�Lg�}�Colin Walters <walters@verbum.org> 0.10.23-17Q�UA- Hack the gtk-doc to remove plugin docs that are not shipped - Drop mythtv, opencv sources that are no longer buildableQ�Kg?�Colin Walters <walters@verbum.org> 0.10.23-16Q�U@- Drop PyXML BR (#914060)N�Ji7�Bastien Nocera <bnocera@redhat.com> 0.10.23-15Q8�@- Remove gmyth plugin�&�Ii�e�Wim Taymans <wtaymans@redhat.com> - 0.10.23-24ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix the build - Resolves: RHEL-16792i�Him�Wim Taymans <wtaymans@redhat.com> - 0.10.23-23X���- Rebuild with hardened flags Resolves: #1420764� �Gi�Y�Wim Taymans <wtaymans@redhat.com> - 0.10.23-22XG��- h264parse: Ensure codec_data has the required size when reading number of SPS Resolves: rhbz#1400839 W �\�� � � W Q�Ug?�Colin Walters <walters@verbum.org> 0.10.23-16Q�U@- Drop PyXML BR (#914060)N�Ti7�Bastien Nocera <bnocera@redhat.com> 0.10.23-15Q8�@- Remove gmyth plugin�&�Si�e�Wim Taymans <wtaymans@redhat.com> - 0.10.23-24ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix the build - Resolves: RHEL-16792i�Rim�Wim Taymans <wtaymans@redhat.com> - 0.10.23-23X���- Rebuild with hardened flags Resolves: #1420764� �Qi�Y�Wim Taymans <wtaymans@redhat.com> - 0.10.23-22XG��- h264parse: Ensure codec_data has the required size when reading number of SPS Resolves: rhbz#1400839�"�Pi�]�Wim Taymans <wtaymans@redhat.com> - 0.10.23-21XF�@- Remove insecure NSF plugin - vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400839O�Oc?�Daniel Mach <dmach@redhat.com> - 0.10.23-20R�U�- Mass rebuild 2014-01-24O�Nc?�Daniel Mach <dmach@redhat.com> - 0.10.23-19R�k�- Mass rebuild 2013-12-27 ^ K�fn � ^ i�\im�Wim Taymans <wtaymans@redhat.com> - 0.10.23-23X���- Rebuild with hardened flags Resolves: #1420764� �[i�Y�Wim Taymans <wtaymans@redhat.com> - 0.10.23-22XG��- h264parse: Ensure codec_data has the required size when reading number of SPS Resolves: rhbz#1400839�"�Zi�]�Wim Taymans <wtaymans@redhat.com> - 0.10.23-21XF�@- Remove insecure NSF plugin - vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400839O�Yc?�Daniel Mach <dmach@redhat.com> - 0.10.23-20R�U�- Mass rebuild 2014-01-24O�Xc?�Daniel Mach <dmach@redhat.com> - 0.10.23-19R�k�- Mass rebuild 2013-12-27��Wg�9�Colin Walters <walters@verbum.org> 0.10.23-18Q��@- Move soundtouch-devel BR to outside RHEL conditional, since it is available there.�1�Vg�}�Colin Walters <walters@verbum.org> 0.10.23-17Q�UA- Hack the gtk-doc to remove plugin docs that are not shipped - Drop mythtv, opencv sources that are no longer buildable V��i � �"�di�]�Wim Taymans <wtaymans@redhat.com> - 0.10.23-21XF�@- Remove insecure NSF plugin - vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400839O�cc?�Daniel Mach <dmach@redhat.com> - 0.10.23-20R�U�- Mass rebuild 2014-01-24O�bc?�Daniel Mach <dmach@redhat.com> - 0.10.23-19R�k�- Mass rebuild 2013-12-27��ag�9�Colin Walters <walters@verbum.org> 0.10.23-18Q��@- Move soundtouch-devel BR to outside RHEL conditional, since it is available there.�1�`g�}�Colin Walters <walters@verbum.org> 0.10.23-17Q�UA- Hack the gtk-doc to remove plugin docs that are not shipped - Drop mythtv, opencv sources that are no longer buildableQ�_g?�Colin Walters <walters@verbum.org> 0.10.23-16Q�U@- Drop PyXML BR (#914060)N�^i7�Bastien Nocera <bnocera@redhat.com> 0.10.23-15Q8�@- Remove gmyth plugin�&�]i�e�Wim Taymans <wtaymans@redhat.com> - 0.10.23-24ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix the build - Resolves: RHEL-16792 � \�F�� � � i�kcs�Wim Taymans <wtaymans@redhat.com> - 1.4.5-4WF�@- rebuild for libdvdnav update - Resolves: #1340047� �jc�7�Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U��- Update audiomixer unit test for big endian - add missing patch - Resolves: #1226909c�icg�Wim Taymans <wtaymans@redhat.com> - 1.4.5-2U���- Update ORC backup file - Resolves: #1174403\�hcY�Wim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ�@- Update to 1.4.5 - Resolves: #1174403�&�gi�e�Wim Taymans <wtaymans@redhat.com> - 0.10.23-24ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix the build - Resolves: RHEL-16792i�fim�Wim Taymans <wtaymans@redhat.com> - 0.10.23-23X���- Rebuild with hardened flags Resolves: #1420764� �ei�Y�Wim Taymans <wtaymans@redhat.com> - 0.10.23-22XG��- h264parse: Ensure codec_data has the required size when reading number of SPS Resolves: rhbz#1400839 e �r+��V��: � � e D�S � 62ccf282c2df0d4b0fb164fedda7d42b0e9be1966f8da03fdcebfb08cf4e5456D�R � e6abdcee27c8de20b83368d087e14b888bef04262eb07ab80e58e528334e1a1cD�Q � 2468aa7b84cd02bdd3dadf04f5dd64bbffc5ae57ff7ef4a973bc74b29757bf6fD�P � 677cbb3bd9f4a461b86460be4a5a9ef23ab126d06907725c3ffe789009559936D�O � 73c486ff61695559ce4daae66d613f19b44873db66b308ac0f3d693c35e6bc5cD�N � ce776b97b4d788033910fe00975ced115a86f293d3c25e4ef91029227b0d3a15D�M � 8ff288d2044bc096fa50399fcc642f5cb7c09ba23f131fb8b2386f6228076ff1D�L � 2aa040acfde2b250770d5a5742e1a2a67ac343654200b1286fcf39302661446cD�K � 99fafc8a49fe4f04b587c0c5dfb8876f9377969f4f143426ab749dc0f84a48a8D�J � 0b299d62c2e3249e8aa1132f170b5b2eb81a8441f5fcb1b29f9970da5b40d33dD�I � 8819df992dd160364ba0aee29998326c7fce6c403594c9abe3dc7e8c293bea83D�H � b6fa4027fc4b1885bba1e19874919c93e8cbaa34816975d67e07e866d7a53bf3D�G � 4e09aa7b08c80287291584ba0426ddf0d69699ff7e4f0bc6cc8e1a788e10bc57 y z�U�| � y \�rcY�Wim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ�@- Update to 1.4.5 - Resolves: #1174403� �qe�]�Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix build - Resolves: RHEL-16793i�peq�Wim Taymans <wtaymans@redhat.com> - 1.10.4-3Y�d�- Disable wayland sink plugin - Resolves: #1488978j�oes�Wim Taymans <wtaymans@redhat.com> - 1.10.4-2X�C�- Disable plugins - Fix origin - Resolves: #1429587x�ne� �Wim Taymans <wtaymans@redhat.com> - 1.10.4-1X�O@- Update to 1.10.4 - Remove unbuilt plugins - Resolves: #1429587�&�mc�k�Wim Taymans <wtaymans@redhat.com> - 1.4.5-6XG��- Fix h264 and h265 buffer size checks - Fix mpegts pat parsing and add more size checks Resolves: rhbz#1400898��lc�#�Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF�@- vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400898 � �n � � i�zeq�Wim Taymans <wtaymans@redhat.com> - 1.10.4-3Y�d�- Disable wayland sink plugin - Resolves: #1488978j�yes�Wim Taymans <wtaymans@redhat.com> - 1.10.4-2X�C�- Disable plugins - Fix origin - Resolves: #1429587x�xe� �Wim Taymans <wtaymans@redhat.com> - 1.10.4-1X�O@- Update to 1.10.4 - Remove unbuilt plugins - Resolves: #1429587�&�wc�k�Wim Taymans <wtaymans@redhat.com> - 1.4.5-6XG��- Fix h264 and h265 buffer size checks - Fix mpegts pat parsing and add more size checks Resolves: rhbz#1400898��vc�#�Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF�@- vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400898i�ucs�Wim Taymans <wtaymans@redhat.com> - 1.4.5-4WF�@- rebuild for libdvdnav update - Resolves: #1340047� �tc�7�Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U��- Update audiomixer unit test for big endian - add missing patch - Resolves: #1226909c�scg�Wim Taymans <wtaymans@redhat.com> - 1.4.5-2U���- Update ORC backup file - Resolves: #1174403 k \��� k �&�c�k�Wim Taymans <wtaymans@redhat.com> - 1.4.5-6XG��- Fix h264 and h265 buffer size checks - Fix mpegts pat parsing and add more size checks Resolves: rhbz#1400898�� c�#�Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF�@- vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400898i�cs�Wim Taymans <wtaymans@redhat.com> - 1.4.5-4WF�@- rebuild for libdvdnav update - Resolves: #1340047� �~c�7�Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U��- Update audiomixer unit test for big endian - add missing patch - Resolves: #1226909c�}cg�Wim Taymans <wtaymans@redhat.com> - 1.4.5-2U���- Update ORC backup file - Resolves: #1174403\�|cY�Wim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ�@- Update to 1.4.5 - Resolves: #1174403� �{e�]�Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix build - Resolves: RHEL-16793 G ���C � G i� cs�Wim Taymans <wtaymans@redhat.com> - 1.4.5-4WF�@- rebuild for libdvdnav update - Resolves: #1340047� �c�7�Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U��- Update audiomixer unit test for big endian - add missing patch - Resolves: #1226909c�cg�Wim Taymans <wtaymans@redhat.com> - 1.4.5-2U���- Update ORC backup file - Resolves: #1174403\�cY�Wim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ�@- Update to 1.4.5 - Resolves: #1174403� �e�]�Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix build - Resolves: RHEL-16793i�eq�Wim Taymans <wtaymans@redhat.com> - 1.10.4-3Y�d�- Disable wayland sink plugin - Resolves: #1488978j�es�Wim Taymans <wtaymans@redhat.com> - 1.10.4-2X�C�- Disable plugins - Fix origin - Resolves: #1429587x�e� �Wim Taymans <wtaymans@redhat.com> - 1.10.4-1X�O@- Update to 1.10.4 - Remove unbuilt plugins - Resolves: #1429587 y z�U�| � y \�cY�Wim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ�@- Update to 1.4.5 - Resolves: #1174403� �e�]�Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix build - Resolves: RHEL-16793i�eq�Wim Taymans <wtaymans@redhat.com> - 1.10.4-3Y�d�- Disable wayland sink plugin - Resolves: #1488978j� es�Wim Taymans <wtaymans@redhat.com> - 1.10.4-2X�C�- Disable plugins - Fix origin - Resolves: #1429587x� e� �Wim Taymans <wtaymans@redhat.com> - 1.10.4-1X�O@- Update to 1.10.4 - Remove unbuilt plugins - Resolves: #1429587�&� c�k�Wim Taymans <wtaymans@redhat.com> - 1.4.5-6XG��- Fix h264 and h265 buffer size checks - Fix mpegts pat parsing and add more size checks Resolves: rhbz#1400898�� c�#�Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF�@- vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400898 � �n � � i�eq�Wim Taymans <wtaymans@redhat.com> - 1.10.4-3Y�d�- Disable wayland sink plugin - Resolves: #1488978j�es�Wim Taymans <wtaymans@redhat.com> - 1.10.4-2X�C�- Disable plugins - Fix origin - Resolves: #1429587x�e� �Wim Taymans <wtaymans@redhat.com> - 1.10.4-1X�O@- Update to 1.10.4 - Remove unbuilt plugins - Resolves: #1429587�&�c�k�Wim Taymans <wtaymans@redhat.com> - 1.4.5-6XG��- Fix h264 and h265 buffer size checks - Fix mpegts pat parsing and add more size checks Resolves: rhbz#1400898��c�#�Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF�@- vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400898i�cs�Wim Taymans <wtaymans@redhat.com> - 1.4.5-4WF�@- rebuild for libdvdnav update - Resolves: #1340047� �c�7�Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U��- Update audiomixer unit test for big endian - add missing patch - Resolves: #1226909c�cg�Wim Taymans <wtaymans@redhat.com> - 1.4.5-2U���- Update ORC backup file - Resolves: #1174403 k \��� k �&� c�k�Wim Taymans <wtaymans@redhat.com> - 1.4.5-6XG��- Fix h264 and h265 buffer size checks - Fix mpegts pat parsing and add more size checks Resolves: rhbz#1400898�� c�#�Wim Taymans <wtaymans@redhat.com> - 1.4.5-5XF�@- vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400898i� cs�Wim Taymans <wtaymans@redhat.com> - 1.4.5-4WF�@- rebuild for libdvdnav update - Resolves: #1340047� � c�7�Wim Taymans <wtaymans@redhat.com> - 1.4.5-3U��- Update audiomixer unit test for big endian - add missing patch - Resolves: #1226909c�cg�Wim Taymans <wtaymans@redhat.com> - 1.4.5-2U���- Update ORC backup file - Resolves: #1174403\�cY�Wim Taymans <wtaymans@redhat.com> - 1.4.5-1UQ�@- Update to 1.4.5 - Resolves: #1174403� �e�]�Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix build - Resolves: RHEL-16793 L ��� � L b�'ce�Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�&_k�David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��%_�3�David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�$ce�Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574� �#e�]�Wim Taymans <wtaymans@redhat.com> - 1.10.4-4ey��- Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix build - Resolves: RHEL-16793i�"eq�Wim Taymans <wtaymans@redhat.com> - 1.10.4-3Y�d�- Disable wayland sink plugin - Resolves: #1488978j�!es�Wim Taymans <wtaymans@redhat.com> - 1.10.4-2X�C�- Disable plugins - Fix origin - Resolves: #1429587x� e� �Wim Taymans <wtaymans@redhat.com> - 1.10.4-1X�O@- Update to 1.10.4 - Remove unbuilt plugins - Resolves: #1429587 a �� �R � a ��/_�3�David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�.ce�Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574b�-ce�Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�,_k�David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��+_�3�David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)c�*_k�David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��)_�3�David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�(ce�Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574 e �r+��V��: � � e D�` � d5da28b2cc382844aa578c0eb19c23535d011518b699a177d00f377554f5c80aD�_ � 86993bde440204eca01ab08264c50ea2e67b216b8b0460a9abd7ed1e48864926D�^ � 835e86766eabc1d9ae0e8b151d9721a415b5dfdc6b9dc31497b790dc7f51e60dD�] � aaa642c4d8ab309bd427dfe250bcf2154390e1fe39eeec98c816058e6da39c2fD�\ � 42f1179fa155a1a3b4448c2b7429ab632d2e5b7216612cb0f5458e96d9c9e738D�[ � a20718245cbc3ce096de1da99acc9aadce7082881bcdc0b1576352b2959e8db8D�Z � fbfc27e8e45f88c94b069c77e301bd007e2e4c2d7e71b268fcaa0c9bee8f84a6D�Y � dee28e194d7127f17697a1e4475e1ffb525b9887c34d90564152f147605360acD�X � c697cda85543d0498850f1a43781d8a7a9027a93e2d04cb19345ead2d9caab5cD�W � f7c28e4b2e40bd7978b5bd740987494914a4fb3430ca45bea2cc9a5f94c01b50D�V � 4459ade066985609ab1ac51574d24bb466645a717a2ff3a30e417a8b91609a87D�U � 4c591b2e577a321d2a3be5e390eecceec9fe2e18c4d4f269ef41f4ecb0ef6c0cD�T � 052c8eb21db8776433111192ff5a74c5160dfebb1bfcc701324165599256b321 ` ��C�Q � ` ��7_�3�David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�6ce�Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�5_k�David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��4_�3�David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�3ce�Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�2_k�David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��1_�3�David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)c�0_k�David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195) � �5�C�R � � V�?y7�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valac�>_k�David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��=_�3�David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�<ce�Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�;_k�David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��:_�3�David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�9ce�Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�8_k�David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195) & d�,�� � & p�Gg}�Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)�+ Update to latest upstream version - Resolves: #1569980l�Fgu�Bastien Nocera <bnocera@redhat.com> - 1.0.1-1X� @+ gupnp-1.0.1-1 - Rebase to 1.0.1 Resolves: #1386985� �Eq��Debarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings Resolves: #1225451M�D_?�Daniel Mach <dmach@redhat.com> - 0.20.3-3R�U�- Mass rebuild 2014-01-24M�C_?�Daniel Mach <dmach@redhat.com> - 0.20.3-2R�k�- Mass rebuild 2013-12-27��By�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q�?@- 0.20.3 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news��Ay�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH�- 0.20.2 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news��@y�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5�@- 0.20.1 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news 8 �0��\ � 8 � �Oq��Debarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings Resolves: #1225451M�N_?�Daniel Mach <dmach@redhat.com> - 0.20.3-3R�U�- Mass rebuild 2014-01-24M�M_?�Daniel Mach <dmach@redhat.com> - 0.20.3-2R�k�- Mass rebuild 2013-12-27��Ly�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q�?@- 0.20.3 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news��Ky�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH�- 0.20.2 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news��Jy�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5�@- 0.20.1 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.newsV�Iy7�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valat�Hg��Bastien Nocera <bnocera@redhat.com> - 1.0.2-6`�[�+ gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706 * � �N� z * M�W_?�Daniel Mach <dmach@redhat.com> - 0.20.3-2R�k�- Mass rebuild 2013-12-27��Vy�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q�?@- 0.20.3 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news��Uy�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH�- 0.20.2 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news��Ty�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5�@- 0.20.1 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.newsV�Sy7�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valat�Rg��Bastien Nocera <bnocera@redhat.com> - 1.0.2-6`�[�+ gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706p�Qg}�Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)�+ Update to latest upstream version - Resolves: #1569980l�Pgu�Bastien Nocera <bnocera@redhat.com> - 1.0.1-1X� @+ gupnp-1.0.1-1 - Rebase to 1.0.1 Resolves: #1386985 e �r+��V��: � � e D�m � 8fbe338dd8adc0ef568214985a4b86d964a490b7b5eb963f88ed406169b64c43D�l � 35f5c229e131ffb525fc38628dbe4dc399fd7f6077f047e169dc8e5ddcce20e8D�k � 9f51218b8454129029c134ac7b8c3cfdae6f1bd1938cb010314534defd013717D�j � cce9b9d8e55d003cd7be906f5603d626c0f14b8e422e5123076eb85b9dab7694D�i � b716a9548efd53a938625df1910ca436cae1cbf92940422987c01ae7cbb040e3D�h � dc73b498dea020241c15f040008e6f96731b9a67cfa83b452c60a9d4510edd41D�g � dacb7b788cec2e57fc23d0ff804942ec81a7a415eee8eca5a9a61540c86d896aD�f � 4634b74cfe7dbc9b83774cbbc50314221241227045a9199072df357ddda72bf3D�e � 28f3ff68224de0783083894b44eefc57e4833a53461ce91f1f4656bbc1b0eb9fD�d � 717c6856842ddb6b4eca2817cbb3adfce002d371a61b322c8c74761e57ae5bcfD�c � bc77febf9b5e706cc4d68361638309818761fa19dfe82ca91496f40a23d81bacD�b � ecb7f8d19fb659a35a4a25d22a891cfd89fd55cc12d791df222c33eba1c9dbdbD�a � 160346449f601718afb8de2d7f7e0aeb2ac8a5f4e2163d2f74d1b98233db4002 B �,�J�z � B ��_y�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH�- 0.20.2 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news��^y�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5�@- 0.20.1 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.newsV�]y7�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valat�\g��Bastien Nocera <bnocera@redhat.com> - 1.0.2-6`�[�+ gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706p�[g}�Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)�+ Update to latest upstream version - Resolves: #1569980l�Zgu�Bastien Nocera <bnocera@redhat.com> - 1.0.1-1X� @+ gupnp-1.0.1-1 - Rebase to 1.0.1 Resolves: #1386985� �Yq��Debarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings Resolves: #1225451M�X_?�Daniel Mach <dmach@redhat.com> - 0.20.3-3R�U�- Mass rebuild 2014-01-24 � d�@�^ � � V�gy7�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valat�fg��Bastien Nocera <bnocera@redhat.com> - 1.0.2-6`�[�+ gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706p�eg}�Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)�+ Update to latest upstream version - Resolves: #1569980l�dgu�Bastien Nocera <bnocera@redhat.com> - 1.0.1-1X� @+ gupnp-1.0.1-1 - Rebase to 1.0.1 Resolves: #1386985� �cq��Debarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings Resolves: #1225451M�b_?�Daniel Mach <dmach@redhat.com> - 0.20.3-3R�U�- Mass rebuild 2014-01-24M�a_?�Daniel Mach <dmach@redhat.com> - 0.20.3-2R�k�- Mass rebuild 2013-12-27��`y�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q�?@- 0.20.3 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news & d�,�� � & p�og}�Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)�+ Update to latest upstream version - Resolves: #1569980l�ngu�Bastien Nocera <bnocera@redhat.com> - 1.0.1-1X� @+ gupnp-1.0.1-1 - Rebase to 1.0.1 Resolves: #1386985� �mq��Debarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings Resolves: #1225451M�l_?�Daniel Mach <dmach@redhat.com> - 0.20.3-3R�U�- Mass rebuild 2014-01-24M�k_?�Daniel Mach <dmach@redhat.com> - 0.20.3-2R�k�- Mass rebuild 2013-12-27��jy�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q�?@- 0.20.3 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news��iy�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH�- 0.20.2 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news��hy�9�Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5�@- 0.20.1 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news 5 �+�K�l 5 �R�w_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�ve[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�u_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�t_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�s_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�r_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�q_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993t�pg��Bastien Nocera <bnocera@redhat.com> - 1.0.2-6`�[�+ gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706 & � �F�f � & ^� e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�~_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�}_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�|_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�{_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993e�z_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�y_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�x_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719) " *�6�b � � " ^�e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) 1 *�6�X � 1 a�_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256T�_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s� _� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e� _o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|� _��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r� _��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R� _�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) % �$N�Z � | % T�_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302) 7 �.�^�� � 7 r� _��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R� _�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^� e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x� _��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a� _g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993 " ��I�m � " r�(_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�'_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�&e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�%_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�$_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�#_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�"_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�!_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) / ��L�z � / x�1_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�0_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�/_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�._��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�-_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�,_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�+_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�*_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�)_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) " ��T�m � " x�9_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�8_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�7_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�6_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�5_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�4_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�3_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�2e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 B ��T�m � � B [�A_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�@_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�?_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�>_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�=_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�<_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�;_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�:e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 � � �A� � r�H_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�G_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�Fe[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�E_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�D_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�C_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�B_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993 " ��I�m � " r�P_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�O_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�Ne[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�M_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�L_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�K_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�J_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�I_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) / ��L�z � / x�Y_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�X_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�W_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�V_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�U_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�T_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�S_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�R_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�Q_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) e �r+��V��: � � e D�z � cc2af8b460ae945f1afdf5f03ea0b48e40aa3372a33d96e0408d1256c8c0294eD�y � a0b60429c7fcd5fba41b9a28504facb63c1539487333911e73e7e2b166b38981D�x � 96f852d003908ae51e7c33a2d18e329760dd559b5ca3c8a594e3d2a5ebf41ce5D�w � 2590f93594e0978b11599b182212244c231fcb0808dff97b691b518fbd531adaD�v � 72fedcf3bf921b3e8efb6e27a94cc4edfe624334e5b7a143442d707cfb625b06D�u � 93d59adb2af4416388006f622bdf8c0f758944b16c04ac683b05b66a90cd48c7D�t � 527d093e43a30a0f0ec3101a8926eeba2b14e4496c495e70a1d5a3ceca45adbdD�s � 34a08308f948f94b0ad18d9d233e22453d984465c89a58935ec1185d071e7f4dD�r � 0b42148789300af59e74814b7d8cb50a3c1453dc197a498f2f37cdc75a6a97d7D�q � 8453856c66fc79e7ec946e471ab4cddd8112886e40b99a72093c616592b2258fD�p � 938d5007ce1dff2b3235913a2a5efe8141b51ff690ea6d5b59b6289df55ab4f8D�o � b95af4b262010256013a4265ab61dfb37bf37e1d4ca12de8b007b315ae8a9b1cD�n � 51af7b29f1554b6ee4cfc1be4f18e91dcb17d8795d87ad960cb26d3fe381cc64 / ��T�m � / i�a_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�`_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�__[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993e�^_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�]_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�\_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�[_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�Ze[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 " �!��u � � " i�i_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�h_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�g_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�f_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�e_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�de[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�c_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�b_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216) �!��u � � s�q_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�p_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�o_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�n_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�m_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�le[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�k_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�j_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216) 3 �=�^�' � 3 |�y_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�x_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�w_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�ve[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�u_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�t_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�s_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256T�r_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816) M �"�m��) � M ^�e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a� _g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�~_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�}_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�|_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�{_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�z_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813) , *�6�p � � , a� _g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i� _w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993e�_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) " �$N�Z � � " a�_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R� _�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^� e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x� _��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302) % �$N�Z � | % T�_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302) " �0�T~ � " e�"_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�!_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r� _��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R� _�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^� e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x� _��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a� _g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256 � �3�a�� � ^�*e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�)_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�(_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�'_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�&_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�%_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�$_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�#_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816) " *�6�b � � " ^�2e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�1_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�0_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�/_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�._o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�-_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�,_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�+_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) / *�6�X � / q�:_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�9_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�8_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�7_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�6_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�5_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�4_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�3_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) " �0�T~ � " e�B_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�A_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�@_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�?_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�>e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�=_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�<_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�;_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256 " �0�T~ � " e�J_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�I_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�H_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�G_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�Fe[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�E_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�D_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�C_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256 � �3�a�� � ^�Re[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�Q_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�P_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�O_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�N_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�M_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�L_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�K_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816) " *�6�b � � " ^�Ze[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�Y_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�X_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�W_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�V_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�U_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�T_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�S_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) e �r+��V��: � � e D� � ace18d3c4c3acb71a8d4c5a6930f0ae58e655462938d91d3ef45aef7694df479D� � 79eacef92a2947aefaab902e53fada60dc27d9c173b1e175f1ce4db04d6c653eD� � 59b2eac344b965618bc03745e27bb5c92278b9fa7c3a6327c3f89fdda6289a54D� � eb18e0e118e44349b3d8917b223e6ca7e2331d41d2e49ec2e8a65f091985bfb7D� � f94ef4ce18a021edb2b5a72fc87092d88e8c7b4aac3c605213fea20cdeefb002D� � a38a894774d443bd314d09acaa9ee6056116e25f757c9e76290fe30450b9ca95D� � 78de7ead3aa002c4e670d2a6bb86af61059a4efe2b86257958242df65bc50d42D� � 3cf6225627d15b57e6db240be4821a47a55d2bf482e4fe8f1928862282e7998eD� � 073a61debf16645920e116641fcf09bdcef80147f54754057c18515f5ebe1f8cD�~ � 09277f1295e2db1f4f90bd3fce359dd8150009233cbba997650480e544b67766D�} � 474549f2d0c95b83d89f1d651d078459863a9e1f202ab7c4c64e77e2735fab8aD�| � b9b11e2c45c327237aea9d0fd84d0d41db9d2a4137822d95f71cedd3ae9145c2D�{ � 858c36d8de6e26caf93ad7dc07224b2b333fcf1617a211b7303e44cdd15a6f3d / *�6�X � / q�b_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�a_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�`_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�__� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�^_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�]_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�\_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�[_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) " �0�T~ � " e�j_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�i_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�h_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�g_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�fe[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�e_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�d_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�c_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256 " �0�T~ � " e�r_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�q_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�p_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�o_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�ne[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�m_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�l_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�k_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256 � �3�a�� � ^�ze[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�y_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�x_g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�w_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�v_��Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�u_[�Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�t_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�s_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816) " *�6�b � � " ^�e[�Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_��Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a� _g�Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w�Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�~_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�}_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�|_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�{_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) / *�6�X � / q� _� Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[� _[ Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�_M�Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�_� �Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�_o�Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_��Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�G�Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) " �0�T~ � " e�_o Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_� Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_� Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�G Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�e[ Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x� _� Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a� _g Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i� _w Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256 " �0�T~ � " e�_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_�Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_�Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_�Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256 P �3� t � � P J�"Y?Daniel Mach <dmach@redhat.com> - 1.5-7R�U�- Mass rebuild 2014-01-24J�!Y?Daniel Mach <dmach@redhat.com> - 1.5-6R�k�- Mass rebuild 2013-12-27�� c�+Petr Stodulka <pstodulk@redhat.com> - 1.5-5R� �- fix issue with nonblocking open for PAR and OFL file Resolves: rhbz#1028052�� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5-4Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild� � W�ADaniel Drake <dsd@laptop.org> - 1.5-3P�6@- Fix "gzip --rsyncable" functionality by removing a spurious blank line from the patch.�� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT� _MOndrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�_� Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816) of flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��7 ��? ��G ��O ��W ��_ ��g ��o ��w �� �� �� �� �� ��( ��1 ��9 ��A ��H ��P ��Y ��a ��i ��q ��y �� �� �� �� ��" ��* ��2 ��: ��B ��J ��R ��Z ��b ��j ��r ��z � � � � �" �) �1 �7 �> �D �J �Q �W �^ �e �k �q �x �~ � � � � �" �) �+ �. �2 �4 �7 �; �> �@ �D �G �I �M �Q �S �V �X �Z �\ �` �d ��i ��n ��s ��x ��z ��} �� �� �� �� �� � � � � � � �! �# �& �( �* �, �0 �4 ) ���c � � ) d�)akRyan O'Hara <rohara@redhat.com> - 1.5.18-3Wi,@- Fix TCP user timeout patch for 1.5.18 releasel�(a{Ryan O'Hara <rohara@redhat.com> - 1.5.18-2Wb��- Add TARGET to install-bin for haproxy-systemd-wrappera�'aeRyan O'Hara <rohara@redhat.com> - 1.5.18-1WaC@- Update to stable release 1.5.18 (#1344012)��&g�%Jakub Martisko <jamartis@redhat.com> - 1.5-11b^�@- fix an arbitrary-file-write vulnerability in zgrep Resolves: CVE-2022-1271�)�%g�mJakub Martisko <jamartis@redhat.com> - 1.5-10Y�z�- doc change: missing grep options are now mentioned in the zgrep man pages/help message Resolves: #1437002V�$cMPetr Stodulka <pstodulk@redhat.com> - 1.5-9X�f@- fix zfoce Resolves: #1382054� �#c�3Petr Stodulka <pstodulk@redhat.com> - 1.5-8U�- Gzip overwrite existing files when user choose "no" on yes/no question. It's due to wrong dupicit declaration of yesno() function in gzip.h which is compiled wrong with -O2 option. Resolves: rhbz#1201689 � ��I�d � � V�1s=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S�- Resolves: rhbz#1125544j�0esRyan O'Hara <rohara@redhat.com> - 1.5.18-9.1`��@- Fix health checks for flapping servers (#1947750)|�/a�Ryan O'Hara <rohara@redhat.com> - 1.5.18-9\v{�- Detect down servers with mutliple tcp-check connect rules (#1677420)c�.aiRyan O'Hara <rohara@redhat.com> - 1.5.18-8[Xf@- Build with USE_GETADDRINFO option (#1598491)]�-a]Ryan O'Hara <rohara@redhat.com> - 1.5.18-7Z �- Rebuild with openssl-1.0.2k (#1509139)l�,a{Ryan O'Hara <rohara@redhat.com> - 1.5.18-6Y#@- Use KillMode=mixed in systemd service file (#1444709)q�+a�Ryan O'Hara <rohara@redhat.com> - 1.5.18-5X�~@- Use soft-static allocation for haproxy UID/GID (#1386130)q�*a�Ryan O'Hara <rohara@redhat.com> - 1.5.18-4X,J@- Return correct exit codes from systemd-wrapper (#1391990) � l�j� � � o�7soRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�6s�WRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�5s�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�4smRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �3s�)Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��2s�/Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056 p ��_r � p n�>smRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �=s�)Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��<s�/Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056V�;s=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S�- Resolves: rhbz#1125544��:u�;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��9u�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�8s�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983 :� � ��Du�;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��Cu�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�Bs�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�AsoRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�@s�WRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�?s�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056 � l�j� � � o�JsoRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�Is�WRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�Hs�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�GsmRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �Fs�)Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��Es�/Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056 = ��_�? � = n�QsmRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �Ps�)Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��Os�/Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056��Nu� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a�@- Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976193��Mu�;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��Lu�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�Ks�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983 :� � ��Wu�;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��Vu�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�Us�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�TsoRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�Ss�WRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�Rs�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056 t��� � �$�^s�WRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�]s�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�\smRichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �[s�)Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��Zs�/Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056V�Ys=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S�- Resolves: rhbz#1125544��Xu� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a�@- Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976193 e �r+��V��: � � e D� � 07cfec6beda5578439d467fa4a51b7e846ea94e1eb455753928367e7fd96ac68D� � 35fc790f76f1d12e738a6b5cd1438085704844f9c267638a15f9cc080376b10dD� � 9a93379d2c2af5db3ccd19b3b12e93f6dee917f2156fc18048525a7a90b313caD� � c425b045fd266e2130faf0b97fe7cadc5218ad8cbb8e87ffbafe1d35b166ff43D� � e083624285f3f8668aeebe5e4297e96c9e4ea9ed3cece7a3318166272f0fe11aD� � 4cf62f2fe312ff9b70310eeb760aecc8141285cba4ffec167b47f1cd26cb8fecD� � 95e6995373810d5b756222856d1b5d2f7d82bcb15022cc12282cbc282404516fD� � c1f39d4de68160899478e6a3a13d87ca0cbb510af261d0319a2c3f3690cf263fD� � bc29e9309d0d6c8bcbf454c1d73fd5eda133e3cd0a96c01283bd3c2830a03310D� � 233182440f451ea41600279219e708b82494832752dd921ec2f2e4c0ab2a7353D� � d39fb02417c772d1ee5c9eb6d9a3981e59719475b6865e25c7e431882fec497bD� � fd358c591bdefefe4f8f4b730734f8e570c3f50680413739ef8785c99d73fdddD� � 12aa178b2c59b3f4c2d815f73b977ffeb7703da8b0da0e7a3a6f02c9aebee2a4 o ���� o � �es�) Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��ds�/ Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056V�cs= Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S�- Resolves: rhbz#1125544��bu�;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��au�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�`s�Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�_soRichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983 � ��!�1 � ��ku� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�js� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�iso Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�hs�W Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�gs� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�fsm Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286 a e�@� a �$�qs�W Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�ps� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�osm Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �ns�) Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��ms�/ Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056��lu�; Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500 < ���a � < � �xs�) Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��ws�/ Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056��vu� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a�@- Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976193��uu�; Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��tu� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�ss� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�rso Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983 � ��!�1 � ��~u� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�}s� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�|so Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�{s�W Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�zs� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�ysm Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286 } e��*� } ���#� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildm�gw Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l�- Switched from SysV to systemd - Spec rearrangements���!� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildb�uS Alexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~�- Switch to servlet 3.0 by default.G�g+ Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX�@- Fixed symlink�� u� Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a�@- Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976193��u�; Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500 � s���I � � b� uS Alexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~�- Switch to servlet 3.0 by default.G� g+ Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX�@- Fixed symlink�� w�' Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch�@- Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853�8� w�{ Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ�- Remove dependency on initscripts - Add After=network.target to systemd service - Resolves: rhbz#1283893, rhbz#1269717Q�g? Daniel Mach <dmach@redhat.com> - 1:1.8.1.3-13R�k�- Mass rebuild 2013-12-27��w� Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571� �w� Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q��- Fix incorrect permissions on systemd unit file - Resolves: rhbz#963911 . b�S�> � . �8�w�{ Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ�- Remove dependency on initscripts - Add After=network.target to systemd service - Resolves: rhbz#1283893, rhbz#1269717Q�g? Daniel Mach <dmach@redhat.com> - 1:1.8.1.3-13R�k�- Mass rebuild 2013-12-27��w� Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571� �w� Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q��- Fix incorrect permissions on systemd unit file - Resolves: rhbz#963911���#� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildm�gw Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l�- Switched from SysV to systemd - Spec rearrangements�� �!� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild � n$�!� � � �w� Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q��- Fix incorrect permissions on systemd unit file - Resolves: rhbz#963911���#�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildm�gwTomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l�- Switched from SysV to systemd - Spec rearrangements���!�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildb�uSAlexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~�- Switch to servlet 3.0 by default.G�g+Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX�@- Fixed symlink��w�' Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch�@- Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853 x$h��' � m�"gwTomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l�- Switched from SysV to systemd - Spec rearrangements��!�!�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildb� uSAlexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~�- Switch to servlet 3.0 by default.G� g+Tomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX�@- Fixed symlink�� w�'Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch�@- Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853�8� w�{Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ�- Remove dependency on initscripts - Add After=network.target to systemd service - Resolves: rhbz#1283893, rhbz#1269717Q� g?Daniel Mach <dmach@redhat.com> - 1:1.8.1.3-13R�k�- Mass rebuild 2013-12-27��w�Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571 6 a�L�< � 6 q�)]�Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)��(w�'Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch�@- Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853�8�'w�{Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ�- Remove dependency on initscripts - Add After=network.target to systemd service - Resolves: rhbz#1283893, rhbz#1269717Q�&g?Daniel Mach <dmach@redhat.com> - 1:1.8.1.3-13R�k�- Mass rebuild 2013-12-27��%w�Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571� �$w� Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q��- Fix incorrect permissions on systemd unit file - Resolves: rhbz#963911��#�#�Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild � ��+k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T�*k�?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency 2 �� 2 �G�.k�%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��-k�ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�,]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889) � kb � �P�2}�%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah�- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�.�1q�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�0k�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��/k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value � ��4k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T�3k�?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency 2 �� 2 �G�7k�%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��6k�ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�5]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889) � kb � ��;q�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�:q�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�9k�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��8k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ) ,�) ��>k�ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�=]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)�P�<}�%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases � 5 � ��@k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�?k�%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�Dq�kLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��Cq�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Bq�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Ak�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues E ��E ��Gk�ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time�P�F}�%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4a�Z@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�F�EW�7Luboš Uhliarik <luhliari@redhat.com>a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session � 5 � ��Ik�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�Hk�%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�Mq�kLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��Lq�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Kq�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Jk�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � �� � ��Qm�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1�P�P}�%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�:�Oq�Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�Nq�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�Sk�?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�R]�Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��Vk�ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�U]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��Tk�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��Xk�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�Wk�%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � �� �N�Zy�%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_���- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�S�Yk�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues e �r+��V��: � � e D�! � 1032b8922d675f553db7b6424ba04c52bf5594bf148d3c80cf447060379be540D� � fbb00aafe5d8bd8b4ce85814f2d529e893f31e915c6393c651859d9dd4be56abD� � 3d4ce04e90a019a713860f38b262e7e948563f62770c6d7fa6bafd59e0ad0580D� � 82d5ee0b6f067209f21584e5acc7fc2bea3ab64f1d41f52bbe4bddc612f4670dD� � f359b38fcffcd9d7ae7daab258f4fd7abea1c839790269254b9b1fbebcb55ba1D� � 80b89881a4e050f35e7e02a7da9f7eeb5a152b057a835557cd8472b6f91d182aD� � 57e3a74cb68c72426ee6a022b286950bbc4ac0c0a450be5d5e07d0a0ac91fcc0D� � 6598e08634815038cb179701fefe7d97564cc4df49d4858c66ac323e5c9c5628D� � 1562216c2581239f50ab2fbbcd1a38b49ace932313a42d97acd2fa2767606ffdD� � 18b6542a7872436ef0c7efd318aadaca8d2c6de3a49d4cd5fd54986bf4b9109eD� � 1243b5c5c37f8cff61bef905abb14b3fec79b4baf0f8804006af238bbc09108fD� � 760d5445bc23c3428607195fc5e872474f29cb02a1ec8cc53a0bc41b6771e204D� � 4d58a246d4453df6a19b52d675c58ebe8d648d62ede5f2fc0cbcb709d686a098 � 5 � ��\k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�[k�%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�`q�kLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��_q�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�^q�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�]k�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues j ��> j �P�d}�%CentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�)�cq�cLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�bq�Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�aq�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�iq�kLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��hq�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�gq�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�fk�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��ek�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value O ��> � O F�nOAJohnny Hughes <johnny@centos.org>d-b�- Manual CentOS Debranding�"�mq�ULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�lq�cLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�kq�Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�jq�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�sq�kLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��rq�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�qq�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�pk�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��ok�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ��> � �xq�Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"�wq�ULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�vq�cLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�uq�Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�tq�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�zk�?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�y]�Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��}k�ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�|]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��{k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�~k�%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications # ��# �P�}�%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah�- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�.�q�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S� k�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � ��k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T�k�?Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency 2 �� 2 �G�k�%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��k�ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889) � kb � �� q�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.� q�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S� k�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ) ,�) ��k�ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec� ]mJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)�P� }�%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases � 5 � ��k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�k�%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�q�kLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��q�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�q�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�k�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues E ��E ��k�ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time�P�}�%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4a�Z@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�F�W�7Luboš Uhliarik <luhliari@redhat.com>a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session � 5 � ��k�9Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�k�%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-� q�kLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content�� q�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�q�mLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�k�=Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � �� � ��!m�7 Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1�P� }�%CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�:� q�Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S� q�7Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�#k�? Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�"]� Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��&k�I Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�%]m Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��$k�9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��(k�9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�'k�% Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � �� �N�*y�% CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_���- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�S�)k�= Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � 5 � ��,k�9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�+k�% Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�0q�k Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��/q�/ Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�.q�m Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�-k�= Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues j ��> j �P�4}�% CentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�)�3q�c Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�2q� Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�1q�7 Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�9q�k Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��8q�/ Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�7q�m Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�6k�= Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��5k�9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value O ��> � O F�>OA Johnny Hughes <johnny@centos.org>d-b�- Manual CentOS Debranding�"�=q�U Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�<q�c Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�;q� Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�:q�7 Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�Cq�k Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��Bq�/ Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Aq�m Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�@k�= Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��?k�9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ��> � �Hq� Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"�Gq�U Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�Fq�c Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�Eq� Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�Dq�7 Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�Jk�? Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�I]� Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��Mk�I Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�L]m Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��Kk�9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��Ok�9 Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�Nk�% Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications # ��# �P�R}�% CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah�- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�.�Qq�m Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Pk�= Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � ��Tk�9!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T�Sk�?!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency 2 �� 2 �G�Wk�%!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��Vk�I!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�U]m!Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889) � kb � ��[q�/!Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Zq�m!Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Yk�=!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��Xk�9!Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ) ,�) ��^k�I"Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�]]m"Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)�P�\}�%!CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases e �r+��V��: � � e D�. � 4317de17f229764365281623322d3bfc068eeae3772e61937438e1e190c1251eD�- � 80b0aaff62516f728ee4d1972185e7b7b5f5d15ea67da82dd19429fac70a5b23D�, � 0094b5e088ab7669b50681c5ee1c139c5ea4b295dff26681ef9aabc6f5a119dbD�+ � 601f376aa7ef59f60e13ba11f0a9a7286b883a945173b5b829fe2e939b6b3d1eD�* � 8fefb0595d7ec2b0969e86042785c698809542ecd2b793434519146c6285a65eD�) � ab57b19bedc00d6be037859d8d8126fff6c0f4421a2b085376f188106987b7e2D�( � 2efed6a1834b9396c783a23359a0750766c22f944cdc5953485f45050af967feD�' � 27c88f137de5866849397dd80af6fd026191916624a901d7d157db89d720351bD�& � 1900d58b22825187824aca7c1c6d194d7a401d5fcf0c433dc2037ac97141b1fdD�% � 4112f1f23e8f476ae869ef1e7ba7b1dcd072616c0fcd173ce6f6a784d7d9f05fD�$ � 5ca852164720791fe6e270a360e14b479b57e0fa1f71c93c1e582a9179353c61D�# � a52b0985bc9791dee53f7a73f22051cc229824892249b53b748eaad81619a0bfD�" � fd5c2fb9ea8fe33dda81b2c13693c8901313964b621a4845172a14c12df1439a � 5 � ��`k�9"Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�_k�%"Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�dq�k"Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��cq�/"Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�bq�m"Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�ak�="Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues E ��E ��gk�I#Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time�P�f}�%"CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4a�Z@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�F�eW�7"Luboš Uhliarik <luhliari@redhat.com>a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session � 5 � ��ik�9#Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�hk�%#Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�mq�k#Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��lq�/#Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�kq�m#Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�jk�=#Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � �� � ��qm�7$Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1�P�p}�%#CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�:�oq�#Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�nq�7#Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�sk�?$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�r]�$Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��vk�I$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�u]m$Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��tk�9$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��xk�9$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�wk�%$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � �� �N�zy�%$CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_���- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�S�yk�=$Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � 5 � ��|k�9%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�{k�%%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-� q�k%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��q�/%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�~q�m%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�}k�=%Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues j ��> j �P�}�%%CentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�)�q�c%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�q�%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�q�7%Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-� q�k&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��q�/&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�q�m&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�k�=&Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��k�9&Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value O ��> � O F�OA&Johnny Hughes <johnny@centos.org>d-b�- Manual CentOS Debranding�"� q�U&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)� q�c&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:� q�&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S� q�7&Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�q�k'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��q�/'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�q�m'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�k�='Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��k�9'Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ��> � �q�'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"�q�U'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�q�c'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�q�'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�q�7'Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�k�?(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�]�(Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h �� k�I(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec� ]m(Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��k�9(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � �� k�9(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G� k�%(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications # ��# �P�"}�%(CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah�- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�.�!q�m(Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S� k�=(Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � ��$k�9)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T�#k�?)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency 2 �� 2 �G�'k�%)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��&k�I)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�%]m)Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889) � kb � ��+q�/)Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�*q�m)Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�)k�=)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��(k�9)Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ) ,�) ��.k�I*Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�-]m*Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)�P�,}�%)CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases � 5 � ��0k�9*Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�/k�%*Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�4q�k*Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��3q�/*Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�2q�m*Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�1k�=*Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues E ��E ��7k�I+Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time�P�6}�%*CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4a�Z@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�F�5W�7*Luboš Uhliarik <luhliari@redhat.com>a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session � 5 � ��9k�9+Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�8k�%+Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�=q�k+Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��<q�/+Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�;q�m+Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�:k�=+Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � �� � ��Am�7,Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1�P�@}�%+CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�:�?q�+Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�>q�7+Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�Ck�?,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�B]�,Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��Fk�I,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�E]m,Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��Dk�9,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��Hk�9,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�Gk�%,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � �� �N�Jy�%,CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_���- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�S�Ik�=,Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� �> �C �H �J �M �O �R �T �W �[ �^ �` �d �g �i �m �q !�s "�v #�x $�z %�| &� '� (� )� *� +� ,� -� .� /�" 0�$ 1�' 2�+ 3�. 4�0 5�4 6�7 7�9 8�= 9�A :�C ;�F <�H =�J ?�L @�P A�T B�Y C�^ E�c F�h G�n H�u I�| J� K� L� M� N� O�& P�- Q�4 R�; S�B T�I U�P V�W W�^ X�e Z�l [�t \�{ ]� ^� _� `� a� b�& c�- d�4 e�; f�B g�I h�P i�W j�^ k�e m�l n�s o�y q�} r� t� u� w� x� y� z� {�" }�$ ~�' �* ��- ��0 ��4 ��6 ��9 ��< ��? � 5 � ��Lk�9-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�Kk�%-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�Pq�k-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��Oq�/-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Nq�m-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Mk�=-Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues j ��> j �P�T}�%-CentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�)�Sq�c-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�Rq�-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�Qq�7-Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�Yq�k.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��Xq�/.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Wq�m.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Vk�=.Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��Uk�9.Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value O ��> � O F�^OA.Johnny Hughes <johnny@centos.org>d-b�- Manual CentOS Debranding�"�]q�U.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�\q�c.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�[q�.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�Zq�7.Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session e �r+��V��: � � e D�; � e58be69903032ce19789e8066ac18b837e6cf4b67db9460c5dbac4897f678352D�: � b750d9875369ddf78843edcdbe9053b4d4a7e6d7bc2ca858b563d14bf5a16e4bD�9 � 93736c157e6c574d78df16b0ccdcb3d5d5bc0856fb66a7d43da85bfe6d0149a6D�8 � 1cd00988d4a50430747550422159355a53806a543c45da98d1b08a6114cde7cdD�7 � 6f853b40dd81bacb35a8698a21c1a1d6663fa911cc8c99485387e4e10aa1cec1D�6 � 0261a6827bcb70a4d4e0bbabff124f88c79ad1171f8d19e379a2e019e4867abfD�5 � 5fbeceddf0bf8f98be4ae1abfe85a15497949baa0f03eb2097d8bd245122c6caD�4 � 796aeedf2cba1ce6592411175e3cf65482a97625d933bb4da8a28f0d16cf34f0D�3 � c96966864df3d8f7e446dbab1aaaf13a2bc50887d2c246af4d21658831913c1cD�2 � d70d1392ce3021f70e51c4dc35c2fa251da70e2e0b7384fc3ca8003c9c2f59bfD�1 � b021fb63d01712466969d8b248713efeb2085fedebff3f3d2e0f0500cd70ea47D�0 � 6c3c6e8e517dcf759d5a75600d88260d972e071d18adcef801da195de54076b6D�/ � a07b8c2dfe81595e9e9b35a3f4a4c913496728d0ab4422f3a5e00e2c9d5174ad kb � �-�cq�k/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��bq�//Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�aq�m/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�`k�=/Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��_k�9/Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ��> � �hq�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"�gq�U/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�fq�c/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�eq�/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�dq�7/Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session N D�:� � N � �n[�;0Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V�mY�U0Jarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� �lY�)0Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x�kY�0Jarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� �jY�?0Jarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8�iY�0Jarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274 Y � {�U � Y ��uk� 1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�tk{1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �sk�+1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module��r[�O0Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699��q[�C0Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� �p[�;0Honggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b�o[m0Honggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412 � y�� � � _�|c_1Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��{m�1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �zm�1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�yk� 1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��xk�1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�wky1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��vk� 1Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death z r�v�| � z z�k� 2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��k�2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�ky2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po�� k� 2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��k� 2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�~k{2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �}k�+2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module � |�� � � �� k�3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp� ky3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��k� 3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��k� 3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_�c_2Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��m�2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �m�2Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression � ��y� � ��k� 4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar}�m�3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �m�3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�c_3Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks�� m�3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� � m�3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz� k� 3Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid() � y�� � � _�c_4Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��m�4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �m�4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�k� 4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��k�4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�ky4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��k� 4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death x |�n�r � x p� ky5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po�� k� 5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death�� k� 5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq� k{5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �k�+5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module}�m�4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �m�4Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal � {�z�� � q�&k{6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �%k�+6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�$c_5Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��#m�5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �"m�5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�!k� 5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()�� k�5Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows r x�~�| � r ��-m�6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �,m�6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�+k� 6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��*k�6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�)ky6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��(k� 6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��'k� 6Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar � �� � � � �4m�7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�3k� 7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��2k�7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�1ky7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��0k� 7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��/k� 7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_�.c_6Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks � z�� � p�;ky8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��:k� 8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��9k� 8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar}�8m�7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �7m�7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�6c_7Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��5m�7Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows � {�z�� � }�Bm�8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �Am�8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�@c_8Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��?m�8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �>m�8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�=k� 8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��<k�8Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows z r�v�| � z z�Ik� 9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��Hk�9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�Gky9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��Fk� 9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��Ek� 9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�Dk{9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �Ck�+9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module � |�� � � ��Pk�:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�Oky:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��Nk� :Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��Mk� :Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_�Lc_9Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��Km�9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �Jm�9Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression � ��y� � � �Wk�+;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module}�Vm�:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �Um�:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�Tc_:Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��Sm�:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �Rm�:Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�Qk� :Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid() � �} � � � �^m�;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�]k� ;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��\k�;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�[ky;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��Zk� ;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��Yk� ;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�Xk{;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse � z�� � p�eky<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��dk� <Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��ck� <Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�bk{<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �ak�+<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�`c_;Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��_m�;Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows e �r+��V��: � � e D�H � 982b829b97c5eb8400e883ee7e5cd1199ec463fe88265cc6be5560667a3366eeD�G � a22140d2598b1d94d1cef9f4d960ba6d9726634bd9bec4682f6338583e5bedbeD�F � 449b85f4d50008df3b5663b39feaa09ec5df8f99f0a2327e0e8e846345963022D�E � f74f11e10a148e5f0fa3445db786553e080cb5d020e255c3b688dfd528ab6f2cD�D � c3b0298c3bbfa69481b4841885e4c53580433e8d4610ea22939be12d797bd88aD�C � 7690f944ed218f74b3624308e1a4d4ddbbef310d2d09257774fdfdadf5cd3916D�B � 9550ba6de8671ca79fa26dead08e944ef94706fde1c73e99c2c59e595b752061D�A � 7a99b195e228185309513ea38f47665d85c3f48be1efc08b2131eebb4af1771cD�@ � 476abb9c019d06d8fbb8b7d20433405022b208c2c777b1de0c036fff3108fc7eD�? � b1f22640d57b95b5f307687ba9cae4a938f5332030e06b6e6ade62170f059a4fD�> � faf21678af2663e54fcc8f5016f8bcab54c797e4a2817cccba232b0e673d3370D�= � 4c96449444e550b77b9d63a86b708d50e9b146f62a64f89fbfce2abfa49c871fD�< � 1b1b3c99c21402de3620ed1fecbd44518682eccd70866a5c3c361b33f649f188 � {�z�� � ��lk� =Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��kk� =Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_�jc_<Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��im�<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �hm�<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�gk� <Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��fk�<Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows ��� � }�tm�=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �sm�=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�rc_=Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��qm�=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �pm�=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�ok� =Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��nk�=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�mky=Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po r x�~�| � r ��{m�>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �zm�>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�yk� >Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��xk�>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�wky>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��vk� >Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��uk� >Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar � �� � � ��k� ?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��k� ?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq� k{?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �k�+?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module}�~m�>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �}m�>Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�|c_>Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks ��� � q� k{@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� � k�+@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�c_?Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��m�?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �m�?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�k� ?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��k�?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�ky?Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po r x�~�| � r ��m�@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �m�@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�k� @Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��k�@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp� ky@Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po�� k� @Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death�� k� @Takao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar � �� � � � �m�ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�k� ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��k�ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�kyATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��k� ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��k� ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_�c_@Ray Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks � z�� � p� kyBTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po�� k� BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death�� k� BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar}� m�ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �m�ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�c_ARay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��m�ATakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows � {�z�� � }�&m�BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �%m�BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�$c_BRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��#m�BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �"m�BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�!k� BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()�� k�BTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows z r�v�| � z z�-k� CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��,k�CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�+kyCTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��*k� CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��)k� CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�(k{CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �'k�+CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module � |��� � ��4k� DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��3k� DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�2k{DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �1k�+DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�0c_CRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��/m�CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �.m�CTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression � ��� � ��;k� ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_�:c_DRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��9m�DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �8m�DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�7k� DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��6k�DTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�5kyDTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po � y�� � � _�Bc_ERay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��Am�ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �@m�ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�?k� ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��>k�ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�=kyETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��<k� ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death x |�t�z � x z�Ik� FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��Hk�FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�GkyFTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��Fk� FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��Ek� FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar}�Dm�ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �Cm�ETakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal � |��� � q�Pk{GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �Ok�+GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module}�Nm�FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �Mm�FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�Lc_FRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��Km�FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �Jm�FTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression r x�~�| � r ��Wm�GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �Vm�GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�Uk� GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��Tk�GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�SkyGTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��Rk� GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��Qk� GTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar � �� � � � �^m�HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�]k� HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��\k�HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�[kyHTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��Zk� HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��Yk� HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar_�Xc_GRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks � z�� � ��ek� ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�dk{ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �ck�+ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module}�bm�HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �am�HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�`c_HRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��_m�HTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows e �r+��V��: � � e D�U � 2c9b86ff8b1784c1b3fe907125539409c664ed05d051c38e8a810200fe93b330D�T � d7aa835b93bc87305149d24877aa4eb93af26e9c534bda18564bb0727392139cD�S � 2aa53317687b50178bded94e1bdf4d35e70e1210e700ac30dff774aab3e3736bD�R � a01dae3f1eb932f0bc862e5f5466508b803a3d1c7bbc6b989e42cef1534de0e3D�Q � 488103f93db3517ddb11caa529814abccd07f454858bec9681eec8375c544207D�P � f24fba7955a7d873bfbd39bae28a5c850f2c27928e1cd98d54264fe51a7d4befD�O � ff13cc6851b7555532b91dc5f8a9c7b73fb8f47f0f39be06ad101f6250c679c5D�N � e9ccc19a3fa831005a0f5568fdabe7c13acd32de915df5fe49983a0214fb34d3D�M � d4c752f14b919fcec87f8f21c7401dc7c9b2ceb39af9d43b03be700c06316653D�L � 32a6e9291813e4daadd971db10a8925ff8233160eb5a5a4fb45d5590f18f2893D�K � 78d39bca758e7f5e4b5122c075cbb2a2c1d8ab9c258b4f91f4744f9ff29a5e8dD�J � 892bbb9cf85d74f25b2bd5cf3702f0da63f86e4093b201704e571b7d86a65f14D�I � 66fc4721d3b2689eac33494f18ab2cf85d9ee8d1dd8532c964f11eeff008e9f1 � y�� � � _�lc_IRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��km�ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �jm�ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�ik� ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��hk�ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�gkyITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��fk� ITakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death r x�~�| � r ��sm�JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �rm�JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�qk� JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��pk�JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�okyJTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��nk� JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��mk� JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar ��+f b�yYoKJiri Vanek <jvanek@redhat.com> 1.6.2-4W�~�- fixed typo in provides - Resolves: rhbz#1299537�A�xY�+KJiri Vanek <jvanek@redhat.com> 1.6.2-3W�-@- added --family to make it part of javas alternatives alignment - java-javaver-openjdk collected into preffered_java - Resolves: rhbz#1299537�N�wY�EKJiri Vanek <jvanek@redhat.com> 1.6.2-1V��- updated to 1.6.2 - fixed also rhbz#1303437 - packag p}�vm�JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-14d�8�- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch� �um�JTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-13d��@- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal_�tc_JRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks e owns /etc/bash_completion.d but it should not own it - generated maven metadata (isntalled but not used. set -e _pompart="need" _jarpart="tobe" _filelist=".mfiles" install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then _jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart" fi done python -m /usr/share/java-utils/maven_depmap \ -p "/usr" -n "" \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \ >> ${_filelist} sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist} sort -u -o ${_filelist} ${_filelist} - Resolves: rhbz#1299537 � � � Y�}Y]KJiri Vanek <jvanek@redhat.com> 1.7.1-1Z7��* bump to 1.7.1 - Resolves: rhbz#1475411��|U�/KJiri Vanek <jvanek@redhat.com> 1.7-3Y�Z@- javaws specific manpage renmed from -suffix to .suffix - Resolves: rhbz#1475411q�{U�KJiri Vanek <jvanek@redhat.com> 1.7-2Y�BA- gathered various patches from usptream - Resolves: rhbz#1475411�g�zU�{KJiri Vanek <jvanek@redhat.com> 1.7-1Y�B@- updated to itw 1.7 and sync from fedora - added forgotten slaves of itweb-settings policyeditor - Own %{_datadir}/%{name} dir - Mark non-English man pages with %lang - Install COPYING as %license - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270 - for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir - removed maven macros in favour of manual handling (bug) - Resolves: rhbz#1475411 ( �Z�R � ( b�YoLJiri Vanek <jvanek@redhat.com> 1.6.2-4W�~�- fixed typo in provides - Resolves: rhbz#1299537�A�Y�+LJiri Vanek <jvanek@redhat.com> 1.6.2-3W�-@- added --family to make it part of javas alternatives alignment - java-javaver-openjdk collected into preffered_java - Resolves: rhbz#1299537�N�Y�ELJiri Vanek <jvanek@redhat.com> 1.6.2-1V��- updated to 1.6.2 - fixed also rhbz#1303437 - packag s�� Y�SKJiri Vanek <jvanek@redhat.com> 1.7.1-4_���- Added Patch6, altjava.patch to make usage of alt-java prefferd over java - Resolves: rhbz#1901639��Y�KKJiri Vanek <jvanek@redhat.com> 1.7.1-3]0_A- Added Patch5, testTuning.patch to make tests pass inclean envirnment - Resolves: rhbz#1724958� �~Y�CKJiri Vanek <jvanek@redhat.com> 1.7.1-2]0_@- added patch1, patch4 and patch11 to fix CVE-2019-10182 - added patch2 to fix CVE-2019-10181 - added patch3 and patch33 to fix CVE-2019-10185 - Resolves: rhbz#1724958 - Resolves: rhbz#1725928 - Resolves: rhbz#1724989 e owns /etc/bash_completion.d but it should not own it - generated maven metadata (isntalled but not used. set -e _pompart="need" _jarpart="tobe" _filelist=".mfiles" install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then _jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart" fi done python -m /usr/share/java-utils/maven_depmap \ -p "/usr" -n "" \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \ >> ${_filelist} sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist} sort -u -o ${_filelist} ${_filelist} - Resolves: rhbz#1299537 � � � Y�Y]LJiri Vanek <jvanek@redhat.com> 1.7.1-1Z7��* bump to 1.7.1 - Resolves: rhbz#1475411��U�/LJiri Vanek <jvanek@redhat.com> 1.7-3Y�Z@- javaws specific manpage renmed from -suffix to .suffix - Resolves: rhbz#1475411q�U�LJiri Vanek <jvanek@redhat.com> 1.7-2Y�BA- gathered various patches from usptream - Resolves: rhbz#1475411�g�U�{LJiri Vanek <jvanek@redhat.com> 1.7-1Y�B@- updated to itw 1.7 and sync from fedora - added forgotten slaves of itweb-settings policyeditor - Own %{_datadir}/%{name} dir - Mark non-English man pages with %lang - Install COPYING as %license - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270 - for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir - removed maven macros in favour of manual handling (bug) - Resolves: rhbz#1475411 ( �Z�R � ( b� YoMJiri Vanek <jvanek@redhat.com> 1.6.2-4W�~�- fixed typo in provides - Resolves: rhbz#1299537�A� Y�+MJiri Vanek <jvanek@redhat.com> 1.6.2-3W�-@- added --family to make it part of javas alternatives alignment - java-javaver-openjdk collected into preffered_java - Resolves: rhbz#1299537�N� Y�EMJiri Vanek <jvanek@redhat.com> 1.6.2-1V��- updated to 1.6.2 - fixed also rhbz#1303437 - packag v�� Y�SLJiri Vanek <jvanek@redhat.com> 1.7.1-4_���- Added Patch6, altjava.patch to make usage of alt-java prefferd over java - Resolves: rhbz#1901639�� Y�KLJiri Vanek <jvanek@redhat.com> 1.7.1-3]0_A- Added Patch5, testTuning.patch to make tests pass inclean envirnment - Resolves: rhbz#1724958� �Y�CLJiri Vanek <jvanek@redhat.com> 1.7.1-2]0_@- added patch1, patch4 and patch11 to fix CVE-2019-10182 - added patch2 to fix CVE-2019-10181 - added patch3 and patch33 to fix CVE-2019-10185 - Resolves: rhbz#1724958 - Resolves: rhbz#1725928 - Resolves: rhbz#1724989 e owns /etc/bash_completion.d but it should not own it - generated maven metadata (isntalled but not used. set -e _pompart="need" _jarpart="tobe" _filelist=".mfiles" install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then _jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart" fi done python -m /usr/share/java-utils/maven_depmap \ -p "/usr" -n "" \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \ >> ${_filelist} sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist} sort -u -o ${_filelist} ${_filelist} - Resolves: rhbz#1299537 � � � Y�Y]MJiri Vanek <jvanek@redhat.com> 1.7.1-1Z7��* bump to 1.7.1 - Resolves: rhbz#1475411��U�/MJiri Vanek <jvanek@redhat.com> 1.7-3Y�Z@- javaws specific manpage renmed from -suffix to .suffix - Resolves: rhbz#1475411q�U�MJiri Vanek <jvanek@redhat.com> 1.7-2Y�BA- gathered various patches from usptream - Resolves: rhbz#1475411�g�U�{MJiri Vanek <jvanek@redhat.com> 1.7-1Y�B@- updated to itw 1.7 and sync from fedora - added forgotten slaves of itweb-settings policyeditor - Own %{_datadir}/%{name} dir - Mark non-English man pages with %lang - Install COPYING as %license - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270 - for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir - removed maven macros in favour of manual handling (bug) - Resolves: rhbz#1475411 4 �Z� � 4 ��{�NDavid Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.46-1[�@- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)��{�NDavid Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1[W�- network: parsing of /proc/mounts returned (bug #1572659) - netconsole: LSB header added (bug #1508489) - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)��Y�SMJiri Vanek <jvanek@redhat.com> 1.7.1-4_���- Added Patch6, altjava.patch to make usage of alt-java prefferd over java - Resolves: rhbz#1901639��Y�KMJiri Vanek <jvanek@redhat.com> 1.7.1-3]0_A- Added Patch5, testTuning.patch to make tests pass inclean envirnment - Resolves: rhbz#1724958� �Y�CMJiri Vanek <jvanek@redhat.com> 1.7.1-2]0_@- added patch1, patch4 and patch11 to fix CVE-2019-10182 - added patch2 to fix CVE-2019-10181 - added patch3 and patch33 to fix CVE-2019-10185 - Resolves: rhbz#1724958 - Resolves: rhbz#1725928 - Resolves: rhbz#1724989 + ���& � + c� aiNJan Macku <jamacku@redhat.com> - 9.49.53-1^Ǿ�- rwtab: Add support for chrony (bug #1838260)�� a�CNJan Macku <jamacku@redhat.con> - 9.49.52-1^�x�- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)Z�aWNJan Macku <jamacku@redhat.com> - 9.49.51-1^r @- Fix inline comment - (bug #1773798)��a�CNJan Macku <jamacku@redhat.com> - 9.49.50-1^h�- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)� �a�]NJan Macku <jamacku@redhat.com> - 9.49.49-1]Z�@- ifup-eth: Check that device name is set (bug #1741830) - Add option for IPv6 GRE tunnel (bug #1691552)�a�a�cNJan Macku <jamacku@redhat.com> - 9.49.48-1]Ik�- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977) - Configure autorelabel service to output to journal and to console if set (bug #1634661) - Fix changelog typo^�a_NJan Macku <jamacku@redhat.com> - 9.49.47-1\��- Fix file permissions for /var/log/dmesg � �� }�OFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1n� qoNJan Macku <jamacku@redhat.com> - 9.49.53-1.el7_9.1_���- rwtab: Allow updating mlocate.db (bug #1880095) Y �� Y � �"��;OFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o |�}�!}�OFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v� }�qOFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�$�uOFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�#��UOFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�'��kOFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�&��3OFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��%��OFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�*}�PFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�)}�qPFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�(}?OCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�-�uPFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�,��UPFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �+��;PFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�0��kPFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�/��3PFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��.��PFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � �4��;QFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�3}�QFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�2}?PCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y�1��kPFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�6�uQFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�5��UQFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�9��kQFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�8��3QFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��7��QFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�<}?QCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�;��qQFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�:��kQFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�?�uRFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�>��URFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �=��;RFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�B��kRFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�A��3RFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��@��RFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�D��qRFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�C��kRFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�F��;RFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�E��%RFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file � � |�H�uSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�G��USFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�K��kSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�J��3SFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��I��SFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�M��qSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�L��kSFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group 8 ��8 ��P��SFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�O��;SFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�N��%SFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file l� �y�S��kTFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�R��3TFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��Q��TFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�U��qTFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�T��kTFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group Z ��8 � Z \�Z}?TCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e���- Roll in CentOS Branding|�Y�sTFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��X��TFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�W��;TFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�V��%TFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file � � � �y�]��kUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y�\��kUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�[��3UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ � � �V�_��%UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|�^��qUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � �W � \�d}?UCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff�- Roll in CentOS Branding�8�cw�{UJulien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_�- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|�b�sUFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��a��UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�`��;UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config e �r+��V��: � � e D�b � 5eee4ed6f4cdcbe1b9de452b76bc924f965eab492a06b0b7f5bb0bbb156d824fD�a � c59e261df9c78880ac906231fc2cce51d269a2a4bdd58d5cccea75abe0465c0bD�` � 558dc0f83e3862c9b965afa5b391a230262f95f6a63563d97c9110ca4deccd16D�_ � d91d835f435d138d7db35fab1aba38aaba2d467d57ccdc15593e6e37665d9e9dD�^ � 0c844b3fd55943ad6df491c0f9396667119e7d8f737d079ca70e1e354c04d769D�] � 7dfa4db17abc05d6bf097a9695e02d8f0889d219fe48c90d147cef40ee6a34e0D�\ � 833dc73a5ec23e1c5d73db93091846da2a990c4c750e903a4a09f3a61282dab0D�[ � 779491f4aff62cb66747a794b7b823e9645eed730e157ff87a8425bfd96871c9D�Z � 509cf9ac14798ddb50f8710817ee91492ef1e1b1a27d3921e30b5434858dc294D�Y � 8b49fbdabac5e8dd32d8de8826af7fee4b0eeab0828f5ad71004efba08ce1b40D�X � 74fb87c43d42d2e134909edffc5d2d759fa9ac176e342697b6d590d62ca8a11fD�W � 2310b0e53fdf17749832f558cf06510e127435a1cce7658a84665de1bf9fa2e7D�V � 08dfe3130e723092bcc8145c8b90e71cc35804a68abc5879143350368fece38b X � � X ��g�VFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P�f�#VFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�e�EVFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�h}�cVFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�i}�GVFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��j}�VFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �m��;VFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�l}�VFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�k}�qVFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��p�WFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P�o�#WFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�n{?VCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�q}�cWFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�r}�GWFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��s}�WFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �v��;WFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�u}�WFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�t}�qWFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��y�XFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �[�x{?WCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�w��UWFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�z}�cXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�{}�GXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��|}�XFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;XFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�~}�XFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}}�qXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�{?XCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|��uXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��UXFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�}�cYFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�}�GYFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��}�YFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;YFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�}�YFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�qYFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |� �uYFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��UYFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!� }�GZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[� {?YCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding�� ��YFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��}�ZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;ZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�}�ZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�qZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��uZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���UZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�{?ZCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\���3ZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ����ZFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��}�[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o }�}�[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�q[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |� �u[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y� ��k[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\� ��3[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�� ��[Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�"}�\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�!}�q\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\� }?[CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�%�u\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�$��U\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �#��;\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�(��k\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�'��3\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��&��\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � �,��;]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ˁ}�+}�]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�*}?\CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y�)��k\Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group of !flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��D ��F ��H ��K ��M ��P ��S ��U ��Z ��] ��_ ��d ��g ��h ��i ��j ��m ��p ��q ��r ��s ��v ��y ��z ��{ ��| �� �� �� �� �� �� �� �� �� �� �� �� �� �� � � �" �% �( �, �. �1 �4 �7 �: �< �> �@ �C �E �H �K �M �R �U �W �\ �_ �` �a �b �e �h �i �j �k �n �q ��r ��s ��t ��w ��z ��{ ��| ��} �� � � � � � � � � � � � � � �$ �& �) �, �/ �2 �4 �6 �8 �; �= �@ �C �E �J ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�.�u]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�-��U]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�1��k]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�0��3]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��/��]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�4}?]CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�3��q]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�2��k]Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�7�u^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�6��U^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �5��;^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�:��k^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�9��3^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��8��^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�<��q^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�;��k^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�>��;^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�=��%^Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file � � |�@�u_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�?��U_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�C��k_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�B��3_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��A��_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�E��q_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�D��k_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group 8 ��8 ��H��_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�G��;_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�F��%_Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file l� �y�K��k`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�J��3`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��I��`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�M��q`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�L��k`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group Z ��8 � Z \�R}?`CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e���- Roll in CentOS Branding|�Q�s`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��P��`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�O��;`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�N��%`Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file � � � �y�U��kaFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y�T��kaFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�S��3aFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ � � �V�W��%aFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|�V��qaFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � �W � \�\}?aCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff�- Roll in CentOS Branding�8�[w�{aJulien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_�- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|�Z�saFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��Y��aFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�X��;aFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config X � � X ��_�bFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ߁P�^�#bFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�]�EbFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�`}�cbFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�a}�GbFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��b}�bFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �e��;bFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�d}�bFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�c}�qbFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��h�cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �P�g�#cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�f{?bCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding e �r+��V��: � � e D�o � 96d4abfe67bd7a9d955276cf0a4e0987e05c018e86c09903e0f0417e753e77acD�n � 8087b4408319998ae1d6b166c84ecab64a54cea6ca23c0fa10d0108446ac99c1D�m � e7250202a7c16893d5954675d11df0fab80808b7c4c5c285328f1c4315027ceeD�l � 017eff95084da1072645aceed55c7d64fe45d437ca48fa5ec6446759047a4d0dD�k � 708df0316ccfbaa7713f5cc4d0174450936ff711924ac55e5527b630498ef3d4D�j � a7f79e36bdad845ee95ab0dcf81c2ac21d35da133b48c0cb448fbd6f1f3a5ceaD�i � acedb410f50fe7ddd7938fec4bc88806e9f316f2c58569efa76c504f5ef11916D�h � 4206286662c3bca7d5dec45b6571835c5c580374921fcc382635bbf1caddac77D�g � 9a646552f12a087de4493fe8a4dfec0a5fb87521f568758c6136443c9644c22fD�f � 8089409b82d6904e6a2853e0d520b54e8935468e99ddd4cec8394dcee0e731d7D�e � bbc75e7ebe20ce9f9b3a0c5ed5ebce0ec757c6a71b928408b3219bb857294882D�d � f07e21fd43e16c0797d167891e1f8dd87c7bcf4ac4177307aec21e25a55ece03D�c � ef279f239f0fe62929c62165d00a4076c51667ba82c640a3790df88dfa67ffa1 �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�i}�ccFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�j}�GcFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��k}�cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �n��;cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�m}�cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�l}�qcFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��q�dFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �[�p{?cCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�o��UcFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�r}�cdFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�s}�GdFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��t}�dFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �w��;dFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�v}�dFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�u}�qdFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�z{?dCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|�y�udFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�x��UdFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�{}�ceFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�|}�GeFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��}}�eFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � � ��;eFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�}�eFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�~}�qeFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��ueFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���UeFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�}�GfFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�{?eCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding����eFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��}�fFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � � ��;fFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�}�fFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�qfFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |� �ufFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��UfFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�{?fCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\� ��3fFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�� ��fFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��}�gFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;gFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�}�gFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�qgFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��ugFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���UgFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y���kgFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3gFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ����gFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�}�hFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�qhFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�}?gCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |� �uhFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��UhFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� ���;hFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o l� �y� ��khFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\� ��3hFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�� ��hFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � �$��;iFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�#}�iFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�"}?hCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y�!��khFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�&�uiFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�%��UiFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�)��kiFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�(��3iFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��'��iFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�,}?iCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�+��qiFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�*��kiFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�/�ujFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�.��UjFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �-��;jFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o l� �y�2��kjFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�1��3jFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��0��jFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�4��qjFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�3��kjFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�6��;jFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�5��%jFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file � � |�8�ukFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�7��UkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�;��kkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�:��3kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��9��kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�=��qkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�<��kkFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group 8 ��8 ��@��kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�?��;kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�>��%kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file l� �y�C��klFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�B��3lFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��A��lFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�E��qlFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�D��klFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group Z ��8 � Z \�J}?lCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e���- Roll in CentOS Branding|�I�slFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��H��lFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�G��;lFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�F��%lFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file � � � �y�M��kmFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y�L��kmFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�K��3mFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ � � �V�O��%mFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|�N��qmFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � �W � \�T}?mCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff�- Roll in CentOS Branding�8�Sw�{mJulien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_�- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|�R�smFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��Q��mFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�P��;mFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config X � � X ��W�nFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa %�P�V�#nFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�U�EnFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag &-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss 'd when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�X}�cnFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�Y}�GnFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��Z}�nFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �]��;nFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ,�}�\}�nFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�[}�qnFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��`�oFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa .�P�_�#oFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�^{?nCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding /-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss 0d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�a}�coFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�b}�GoFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��c}�oFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �f��;oFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o 5�}�e}�oFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�d}�qoFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��i�pFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa 8[�h{?oCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�g��UoFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. e �r+��V��: � � e D�| � 951d300e30de3f44fa83fea5bff378fb53589245060530b325e00fa9f6c7f5d3D�{ � 13e6e0aca27ac928a13a8392353c51dcc310d1458f84cf2c8811620996c73fc2D�z � 065be8dcad1accb013d907c343f946bf2aee0c7ebe74cc8d43c80d008e10fed5D�y � d2df50179ec4ae53b3b02398bb8ed1d376fddb157a0b2c4996e0c09559793409D�x � 3268859dec4857e91df2b98be2c4c1039a81c1208032d1627ffafee642953fc2D�w � 9fe30f8f94bda5cdd5390de29d8a6c4c8f6dbbb9aeec90fb2dbf9da761d3e515D�v � 9277a339164ce4554d7e44a5274d72e8acdef0f65c7e2f5ae1558953312edbfcD�u � f3480d9490430ccdec35a8db1fdcd4f48fc92476fd17dea7b616fd9995372e88D�t � 6fc0812fc250d841a58cd125c88d60ba6c53d4c751c3c985ba925f28e597e5adD�s � 47f19899e75c7c9a5b74f30643d69d0ccff2cf5451546d7ad1a727bccaaf0ea4D�r � ceba479b3f7e61b1f98d50e4797543b538d563b420b419155fedeead08a06b2eD�q � d2db9132b158642ca3acdce95a3018565ff05f4497c6fa76140e7a98a3a959f3D�p � 3bc9984dc4e0e90245e74d760cf04b6707669b3289dc3e70c040cdfde4d44319 9-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss :d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�j}�cpFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�k}�GpFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��l}�pFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �o��;pFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ?�}�n}�pFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�m}�qpFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�r{?pCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|�q�upFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�p��UpFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�s}�cqFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�t}�GqFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��u}�qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �x��;qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o E�}�w}�qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�v}�qqFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�z�uqFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�y��UqFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�}}�GrFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�|{?qCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding��{��qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��~}�rFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;rFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o J�}� }�rFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�qrFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��urFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���UrFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�{?rCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\���3rFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ����rFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��}�sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � � ��;sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o O�}� }�sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�qsFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |� �usFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��UsFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y���ksFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�� ��sFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�}�tFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�qtFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�}?sCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |��utFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���UtFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� ���;tFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o S l� �y���ktFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3tFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ����tFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � � ��;uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o W�}�}�uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�}?tCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y���ktFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |� �uuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��UuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�!��kuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\� ��3uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�� ��uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�$}?uCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�#��quFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�"��kuFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�'�uvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�&��UvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �%��;vFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o [ l� �y�*��kvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�)��3vFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��(��vFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�,��qvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�+��kvFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�.��;vFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�-��%vFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file � � |�0�uwFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�/��UwFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�3��kwFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�2��3wFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��1��wFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�5��qwFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�4��kwFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� "�O #�T $�W (�X )�Y *�Z +�] -�` 1�a 2�b 3�c 4�f 6�i ;�j <�k =�l >�o @�r A�s B�t C�u D�x F�z G�} H�~ I� K� L� M� N� P� Q� R� T� U� V� X� Y�! Z�$ \�' ]�* ^�, _�. `�0 a�3 b�5 d�8 e�; f�= g�B h�E i�G j�L k�O o�P p�Q q�R r�U t�X x�Y y�Z z�[ {�^ }�a ��b ��c ��d ��g ��j ��k ��l ��m ��p ��r ��u ��v ��y ��{ ��~ �� �� �� �� �� �� �� �� �� �� �� �� ��" ��$ ��& ��( ��+ ��- ��0 ��3 ��5 ��: ��= ��? ��D ��G ��H ��I ��J ��M ��P ��Q 8 ��8 ��8��wFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�7��;wFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�6��%wFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file l� �y�;��kxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�:��3xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��9��xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�=��qxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�<��kxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group Z ��8 � Z \�B}?xCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e���- Roll in CentOS Branding|�A�sxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��@��xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�?��;xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�>��%xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file � � � �y�E��kyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y�D��kyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�C��3yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ � � �V�G��%yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|�F��qyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � �W � \�L}?yCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff�- Roll in CentOS Branding�8�Kw�{yJulien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_�- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|�J�syFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��I��yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�H��;yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config X � � X ��O�zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa l�P�N�#zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�M�EzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag m-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss nd when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�P}�czFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�Q}�GzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��R}�zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �U��;zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o s�}�T}�zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�S}�qzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��X�{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa u�P�W�#{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�V{?zCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding v-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss wd when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�Y}�c{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�Z}�G{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��[}�{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �^��;{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o |�}�]}�{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�\}�q{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��a�|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ~[�`{?{CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�_��U{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�b}�c|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�c}�G|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��d}�|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �g��;|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�f}�|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�e}�q|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�j{?|CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|�i�u|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�h��U|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. e �r+��V��: � � e D� � 26057397691d0e4487c2c746c43e15367dce434090f9495b535dab7657e51a9cD� � 0720c43c680146e7a676c6340d3f1529fb116ef0c12105b5b84f41a448512564D� � 44df7609ed5e477add5d58e49530bb036fc2ff1d94098c85b2111eeb85a31168D� � 0b22b530fe470f3e466de0b4c9a662510b4feffc3540c2add9689e58fe543a56D� � e8fcf04ec6289d6ed5e26623877c40ac8ff5d22653e6acfb45465877e4ff0dc5D� � 46014250185344e990623d8284713f5bcea7006c7779fc959f7da3d39032c89bD� � addcd00db9e64f493d8286287e758d561f51abb09ce1ba2dd73f4b708c60e866D� � cd7ab4d402e24250450215dd316bc8db5cbabc2abdaf16110521f6e623589deaD� � 95ca57f8286ce2eaacee848405bb95f1e3ae571def5526f34c8d1abdb873b30cD� � c3063c4a546358bcf8640da753ea13f90ccbb18da78588f7c8a9b3011eccfd55D� � ac419246df9921713ed1c65bf7621fa6b5266999545f33a73aab328bcd38d3f0D�~ � 7bfce38ec77185d1696e388cecf4163509c7884933ded369897a1fcf77610b49D�} � da1dc98d83517de259389f28cb15535a0c5b895342f95881d9cdb88529401e7a �o�k}�c}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�l}�G}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��m}�}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �p��;}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�o}�}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�n}�q}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�r�u}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�q��U}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�u}�G~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�t{?}CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding��s��}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��v}�~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �y��;~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�x}�~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�w}�q~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�{�u~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�z��U~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�~{?~CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\�}��3~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��|��~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��}�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�}�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v� }�qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y���kFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v� }�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�}?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |� �u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� � ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \� }?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|���q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |� �u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� � ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�"��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�!��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�� ���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�$��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�#��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�&��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�%��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file � � |�(�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�'��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�+��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�*��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��)���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�-��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�,��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group 8 ��8 ��0���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�/��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�.��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file l� �y�3��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�2��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��1���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�5��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�4��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group Z ��8 � Z \�:}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e���- Roll in CentOS Branding|�9�s�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��8���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�7��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�6��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file � � � �y�=��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y�<��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�;��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ � � �V�?��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|�>��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � �W � \�D}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff�- Roll in CentOS Branding�8�Cw�{�Julien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_�- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|�B�s�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��A���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�@��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config X � � X ��G��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P�F�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�E�E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�H}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�I}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��J}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �M��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�L}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�K}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��P��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P�O�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�N{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�Q}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�R}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��S}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �V��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o }�U}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�T}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��Y��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �[�X{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�W��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�Z}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�[}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��\}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �_��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ˁ}�^}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�]}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�b{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|�a�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�`��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�c}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�d}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��e}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �h��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o с}�g}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�f}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�j�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�i��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�m}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�l{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding��k���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server e �r+��V��: � � e D� � b11d559c42557a76fa28ec310e056c9da6ea2279ff9e9d2550f053c95a60eb4cD� � 1838c4a50fba6cc7f01b473b8ebeaa6c7edb92cac0662a563b2b802ffa0fb3aaD� � 185387ed3f5744ba48ddfaf8a3d5ccc041f095dff1ea382c043dbe6835d3e739D� � 26b65e8ddb2e0f1b106113ae92e86c40572c636fadb1825dfa21ea13c21ecc4cD� � fe9ddea76d491834446326906a81c67139192d20db46b613104c60028b90693bD� � 86cef284a27c740098bf41032dcb527c08c5847589bc56cd6dda05d37f714bdcD� � 83da2d9387fb7b54637b838d32f6027693e46e5eaa5f85a337fda688683830f5D� � 80ce6a4a15f013d38eba7effe54a0be427263f17ea3cccd5f299625962e17ef3D� � 7362e3afa20e7270f6bd0843928dbc50fc58aee6b6187699194d02979a9c9b4bD� � 56a814e3eeaf048c77ba188904c435aeaea3d62cc3a5cb3e815e9921e1d60166D� � 0f9586b6d0d300edc438c789f89bb5cc08cc5ad9ef33210f4da2aa9cb0977f06D� � 505e596b1b77d05f545fd3684fbdd8591bf9ca308db67ff0a6b36dd0a1341c17D� � d3b825ecf0857cf7486c9085c1579cac88394eb38dbc27d654ff8a989aa9f4f2 pi winsx}���������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� 9 : o* �8 �F �T b p 2~ ]� m� ��% ��2 ��? ��L ԁY �f �s � .� C� X�' m�4 ��A ��N ��[ Âh ׂu � � � -�) C�6 X�C m�P ��] ��j ��w �� � n� + �8 =�E Y�R �_ ��l ��y ȅ � �� �- *�: J�G �T ��a ��n ��{ ҆ � �" *�/ C�< [�I s�V ��c ��p ��} և � �$ �1 9�> Q�K i�X ��e ��r �� �� �� Lj& Ԉ3 �@ �M ��Z �g !�t )� E� g� ��( ��5 ��B ��O ĉ\ ؉i �v �� � &� :�* O�7 e�D ��Q ��^ ��k ӊx � � %� ?�, [�9 y* %'*06<BHNTZ`flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��S ��` ��m ��z �� Ԍ �! �. D�; Y�H l�U ��b �o 7�| �� ԍ $�# s�0 ��= ̍J �W �d �q 7�~ R� s� ��% Ԏ2 �? .�L n�Y ��f ʎs �� &� g� ��' ��4 ��A -�N [�[ ��h ��u �� � C� q�) ��6 ��C �P �] >�j i�w �� �� � �+ 9�8 `�E ��R ��_ ܑl �y 4� W� |� ��- Ӓ: ��G *�T C�a ��n �{ h� ̓ 9�" ��/ �< y�I ΓV >�c ��p �} s� ۔ =�$ ��1 �> y�K �X C�e ��r � {� � !E�& !��3 ""�@ "B�M "`�Z "s�g "��t "�� "�� "ɖ "�( # �5 #9�B #l�O #��\ #ϖi $�v $X� $~� $�� $��* $��7 $ԗD $�Q $��^ %�k } } ��n}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �q��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ف}�p}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�o}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�s�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�r��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�v{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\�u��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��t���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��w}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �z��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ށ}�y}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�x}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�|�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�{��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�~��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��}���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server # �%# �}��}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�� }?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service a � � a |���u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m����U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� ����;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � � k� �\����3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server " ��$ " �}�� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�� }?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y�� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service a � � a |���u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�� ��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �� ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � � k� �\����3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �� �y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role r �� r � ����;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �\��}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|����q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |���u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m����U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k� �\����3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �� �y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V�� ��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|�� ��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � ( � |�� �u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�� ��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.�a�� ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config � k� �\��"��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ���!���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �� �y��$��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y��#��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V��&��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|��%��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � � �\��*��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ���)���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server���(���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a��'��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config � �� �y��,��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y��+��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V��.��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|��-��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � �� � �\��3��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ\��2}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e���- Roll in CentOS Branding|��1�s�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection���0���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a��/��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config � �� �y��5��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y��4��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V��7��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|��6��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin eS JSY_ekqw}�������������������� $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��S ��V �Y �Z �[ �\ �_ �b �c �d �e �h �j �m �n �q �s �v �w �z �| � ၀ 䁀 偀 灀 聀 遀 ꁀ 쁀 큀 � �" �$ �& �* ���, ���. ���3 ���5 ���7 ���< ���? ��@ ��A ��B ��E ��H ��I ��J ��K ��N ��Q ��R ��S ��T ��W ��Z ��[ ��\ ��] ��` ��b ��e ��f ��i "��k #��n %��o &��r (��t )��v *��y +��{ -��} .�� /�� 1�� 2�� 3�� 4�� 6�� 7�� 8�� 9�� :�� ;�� <�� =�� >��" ?��$ @��& A��+ B��- C��/ D��4 E��7 I��8 � �S � \��<}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff�- Roll in CentOS Branding�8��;w�{�Julien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_�- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|��:�s�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection���9���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a��8��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config U � � U ���?��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P��>�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a��=�E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o��@}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��A}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���B}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��E��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}��D}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��C}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service \ ��\ ���H��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �P��G�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[��F{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o��I}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��J}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���K}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��N��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}��M}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��L}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service ? �? ���Q��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa [��P{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m��O��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o��R}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��S}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���T}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��W��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}��V}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��U}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service / �/ [��Z{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|��Y�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��X��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o��[}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��\}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���]}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��`��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}��_}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��^}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��b�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��a��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k � �!��e}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[��d{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding���c���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server | | ���f}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��i��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o !�}��h}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��g}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��k�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��j��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. + k�+ [��n{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\��m��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ���l���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server e �r+��V��: � � e D�# � 58790e773666a310f1c4417f46de1fb127437bce225ed0d9cbf6b4a08054ae98D�" � d315bb2c28ee908b28dcdf583c02c6e2135a1e2a504eab6b1b0b1ea2366cd38cD�! � 78d5b1f2129f41fe187e0ac04949364deea63d749d50862bb7767f1e00444a71D� � 5dd078d9c34f67aacb48cc5f22103833d14b4bfa4bc86f6a4d5ba09de9cdbdcbD� � e0fb73f01affcb06ca29acf2c378ce6d3035f42a90552ed157bd34ccf137226fD� � 6dcf38b2dd21eea79940f1fdaf48332d6c3ecaa1fd0add17464537dd24fef021D� � fe59e0e08fdd30fac03b78e5e5afd3169677c15d89d0797bddd5d5e796f2e43aD� � 06e8b2bd304cd09ba4be27cd71f6e46da23994939ba405275e37c1d39b91f75bD� � f2a56e1e7ae1606a974d68a45c31824b05cfcb8ff28d94b4d090080e6e76c3a7D� � 5e7f113d0a50e93468c406b83d0079441feedc8fdc94a3867761526c5cf7b4adD� � 724104b78d65c37a7c944beaca3bddc2e94e0e2766838104816b951ec6b107c5D� � 133710e665511ae5f9d0928eba116d6f2d1f06f71afbe0e7013e3d46a1238e21D� � 878d2dbcd884adb9e2de690242d04710df89bee67b51aa86e9468e01de78341b | | ���o}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��r��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o '�}��q}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��p}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��t�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��s��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k� �\��v��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ���u���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �" � �v��y}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\��x}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding�y��w��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � �� � ��{��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ,�}��z}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��}�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��|��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k� �\����3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ���~���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server " ��$ " �}��}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\��}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y�� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service a � � a |���u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m����U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� ����;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o 0 � k� �\����3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �� �y�� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y�� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role r �� r � �� ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o 5\�� }?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�� ��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |���u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m����U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k� �\����3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �� �y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V����%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|����q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � ( � |���u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m����U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.�a����;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config � k� �\����3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �� �y�� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V�� ��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|�� ��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � � �\��"��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ���!���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server��� ���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�� ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config � �� �y��$��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y��#��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V��&��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|��%��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � �� � �\��+��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ\��*}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e���- Roll in CentOS Branding|��)�s�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection���(���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a��'��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config � �� �y��-��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y��,��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V��/��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|��.��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � �S � \��4}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff�- Roll in CentOS Branding�8��3w�{�Julien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_�- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|��2�s�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection���1���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a��0��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config U � � U ���7��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa F�P��6�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a��5�E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag G-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss Hd when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o��8}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��9}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���:}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��=��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o M�}��<}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��;}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service \ ��\ ���@��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa O�P��?�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[��>{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding P-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss Qd when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o��A}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��B}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���C}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��F��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o V�}��E}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��D}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service ? �? ���I��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa X[��H{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m��G��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. Y-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss Zd when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o��J}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��K}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���L}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��O��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o _�}��N}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��M}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service / �/ [��R{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|��Q�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��P��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o��S}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��T}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���U}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��X��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o e�}��W}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��V}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��Z�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��Y��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k � �!��]}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[��\{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding���[���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server | | ���^}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��a��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o j�}��`}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��_}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��c�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��b��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. + k�+ [��f{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\��e��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ���d���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server | | ���g}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��j��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o o�}��i}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��h}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��l�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��k��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k� �\��n��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ���m���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �" � �v��q}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\��p}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding�y��o��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role e �r+��V��: � � e D�0 � 76813e1abc18c641eb46092531885c18b9c6ddd5e9dc4e228b79d8c1701b18aaD�/ � 3b2f3d7b1d885c5edc646e442aa9d94f1445bf4eedc14e0b85c4b0d8f69524a8D�. � dab287aa189bc4e289c79998917467ba4a97037e00fe28be6d93e2537aed7bb7D�- � 98fb1fad0191aec5d51055b0a98b319339dfdb3295a687465da5a1122d7998b7D�, � 4f37e8e35d62af3023fa7e8393ded5ec181f09c19bbdf8f8210919d800c883acD�+ � 97cdaffa439041e92b0a8642fd10637591e412ee471c5dd1572dd88e2d6decc7D�* � 78c54e3e24da878a2395d1db2fe940598eade355a2ed7955fe408e1151a3bdebD�) � b98e50cb5344b27eeecb7c8f6a0bd8ae65ea51bfc626a744f6d64347692558a8D�( � bdfe37339f1054699a6343f8d578f712a70a609276a9b8ed1eee991f37771614D�' � 3a9e272508ed53c6c3ca36cc4d1c537b9a6096425aa6339399939cfb7a44d1c2D�& � c8dfb7c69048e40d89f055121f7bf399c85c51f08160824fe50d9434c253a4a3D�% � 50b41570ec21f348d3c7adf1b62909fcf0674e4f13126166d7667664345d4f42D�$ � 908fa60367f005eeb06ef2422874df47c562ea782942062b68547373fdaa4040 � �� � ��s��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o u�}��r}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��u�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��t��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k� �\��w��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ���v���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server " ��$ " �}��{}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\��z}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y��y��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y��x��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service a � � a |��~�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��}��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� ��|��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o y � k� �\�� ��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �� �y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role r �� r � ����;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ~\��}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|����q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |���u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m����U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k� �\�� ��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �� �y�� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y�� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V�� ��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|�� ��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � ( � |���u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m����U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.�a����;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ K��: L��= N��@ R��A S��B T��C U��F W��I [��J \��K ]��L ^��O `��R a��S b��T c��U d��X f��Z g��] h��^ i��a k��c l��f m��g n��j p��l q��n r��q t��s v��u w��w x��{ z��~ {�� |�� }�� �� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���# ���% ���' ���, ���/ ���0 ���1 ���2 ���5 ���8 ���9 ���: ���; ���> ���A ���B ���C ���D ���G ���J ���K ���L ���M ���P ���R ���U ���V ���Y ���[ ���_ ���e ���k ���r ���y ��� ��� ��� ��� ��� ��� �# Á�) ā�/ Ł�5 Ɓ�; ǁ�B ȁ�I Ɂ�O ʁ�V ˁ�\ ́�b � k� �\����3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � �� �y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V����%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|����q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � � �\����3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server������Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a����;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config � �� �y�� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y����k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V�� ��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|�� ��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � �� � �\��#��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ\��"}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.16e���- Roll in CentOS Branding|��!�s�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection��� ���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a�� ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config � �� �y��%��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group�y��$��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role � � � �V��'��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file�|��&��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin � �S � \��,}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.17ff�- Roll in CentOS Branding�8��+w�{�Julien Rische <jrische@redhat.com> - 4.6.8-5.el7_9.17f_�- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force|��*�s�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.16e\��- Resolves: RHEL-12570 ipa: Invalid CSRF protection���)���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15d˖�- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak�a��(��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config U � � U ���/��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P��.�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a��-�E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o��0}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��1}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���2}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��5��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}��4}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��3}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service \ ��\ ���8��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P��7�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[��6{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o��9}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��:}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���;}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��>��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}��=}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��<}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service ? �? ���A��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �[��@{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m��?��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o��B}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��C}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���D}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��G��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}��F}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��E}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service / �/ [��J{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|��I�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��H��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o��K}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!��L}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords | | ���M}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��P��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}��O}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��N}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��R�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��Q��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k � �!��U}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[��T{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding���S���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server | | ���V}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 V �� V � ��Y��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}��X}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v��W}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��[�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m��Z��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � k�+ � ~��_i��Michal Ruprich <mruprich@redhat.com> - 3.1.6-1X���- Resolves: #913329 - [RFE] include iperf3 in RHEL 7 - initial build[��^{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\��]��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ���\���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server 3 A�� � 3 ���e=�{�Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding requires to spec file for devel package�:��di� �Michal Ruprich <mruprich@redhat.com> - 3.1.7-1X�C�- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding latest version before including iperf3 in RHEL-7~��ci��Michal Ruprich <mruprich@redhat.com> - 3.1.6-1X���- Resolves: #913329 - [RFE] include iperf3 in RHEL 7 - initial build���b]�5�Stepan Broz <sbroz@redhat.com> - 3.1.7-3d��@- Resolves: #2224558 - iperf3: memory allocation hazard and crash (CVE-2023-38403)���a=�{�Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding requires to spec file for devel package�:��`i� �Michal Ruprich <mruprich@redhat.com> - 3.1.7-1X�C�- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding latest version before including iperf3 in RHEL-7 � s�2� � ~��ki��Michal Ruprich <mruprich@redhat.com> - 3.1.6-1X���- Resolves: #913329 - [RFE] include iperf3 in RHEL 7 - initial build���j]�5�Stepan Broz <sbroz@redhat.com> - 3.1.7-3d��@- Resolves: #2224558 - iperf3: memory allocation hazard and crash (CVE-2023-38403)���i=�{�Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding requires to spec file for devel package�:��hi� �Michal Ruprich <mruprich@redhat.com> - 3.1.7-1X�C�- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding latest version before including iperf3 in RHEL-7~��gi��Michal Ruprich <mruprich@redhat.com> - 3.1.6-1X���- Resolves: #913329 - [RFE] include iperf3 in RHEL 7 - initial build���f]�5�Stepan Broz <sbroz@redhat.com> - 3.1.7-3d��@- Resolves: #2224558 - iperf3: memory allocation hazard and crash (CVE-2023-38403) e �r+��V��: � � e D�= � 596e62671849cfd110b4ac4c57b171fec5bb07301be496f20b9b86d591947ebeD�< � 1eac2001120394176840294e989343eb699519e8284843a3cdd14f5fb3f39a95D�; � 7d3b3df85df3f1d47ab959aa42eea6f3302b166b9e37ef92779c1c8acedfd671D�: � 0e0b806579667e86ea70685a838f8c23073e5084c9c3135588b05d5d395ec9d3D�9 � 73be1cce35dd9bd5fb59093ba5faf459b1f723fec8ccad9d13b18e6e1b249b10D�8 � 30f252a9be101e11f5009f24025e69ac8850c0e429134629fceda20f9508a261D�7 � 559d3f3c580f94eb5e25df5db277b1e4076d0d1911bd304941680178b21d9e5fD�6 � 31535d62fcdd33c68d7c941c0b2b9e56b4f4749c5c04518d19b67a70214a8012D�5 � b4ef197940e3c4fa8fa6153875480c974b0ffa36f4534e7c04d901e91440e53cD�4 � 514e7d973b405b3d0028fc7df9e3b46ac3dbc49e864417967dad13ed6c1a344dD�3 � 46fcca6c6687e1d7465d0f99ea219de21f84bde74cc822721a5e55a13bf97a0cD�2 � e85016af12ca079ec7dcd10cfe41ca3eb0ae74f337e7db981ea8289ce132cc0bD�1 � 1b0076a98d327d7bc0db69b985d05e02f9d0e927d5d7645ad2a14dba64ceaf52 V A��[ � V W��reM�Josef Ridky <jridky@redhat.com> - 0:1.8.18-4X�+�- Fix RPMDiff issues and rebuild�%��qe�g�Josef Ridky <jridky@redhat.com> - 0:1.8.18-3X��@- Fix issues with warning: dereferencing type-punned pointer will break strict-aliasing rules from RPMDiffR��peC�Josef Ridky <jridky@redhat.com> - 0:1.8.18-2X���- Fix issue in file sources_��oe]�Josef Ridky <jridky@redhat.com> - 0:1.8.18-1X� @- New upstream release 1.8.18 (#1398658)���n]�5�Stepan Broz <sbroz@redhat.com> - 3.1.7-3d��@- Resolves: #2224558 - iperf3: memory allocation hazard and crash (CVE-2023-38403)���m=�{�Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding requires to spec file for devel package�:��li� �Michal Ruprich <mruprich@redhat.com> - 3.1.7-1X�C�- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding latest version before including iperf3 in RHEL-7 = ���#� � = R��yeC�Josef Ridky <jridky@redhat.com> - 0:1.8.18-2X���- Fix issue in file sources� ��xk�S�Pavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a�{�- Protect against negative values to memmove that caused "ipmitool sol activate" to crash against an IBM DataPower appliance (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519) Cherry-picked from upstream PR#78.i��wsc�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_�@- Disable -fstrict-aliasing (RPMDiff issue)^��vsM�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F�- Backport fix for CVE-2020-5208o��ue}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy��- Remove debug prints shown without -v option (#1483163)���te�=�Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y�{�- Hide unrequested verbose output (#1483163) - Fix doc for check input values (#1495098)o��se}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-5X�s�- Remove RPMDiff fix file (#1439269) related to #1398658 � V���� � i�� sc�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_�@- Disable -fstrict-aliasing (RPMDiff issue)^��sM�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F�- Backport fix for CVE-2020-5208o��~e}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy��- Remove debug prints shown without -v option (#1483163)���}e�=�Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y�{�- Hide unrequested verbose output (#1483163) - Fix doc for check input values (#1495098)o��|e}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-5X�s�- Remove RPMDiff fix file (#1439269) related to #1398658W��{eM�Josef Ridky <jridky@redhat.com> - 0:1.8.18-4X�+�- Fix RPMDiff issues and rebuild�%��ze�g�Josef Ridky <jridky@redhat.com> - 0:1.8.18-3X��@- Fix issues with warning: dereferencing type-punned pointer will break strict-aliasing rules from RPMDiff < �� < �Q��i�;�Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1W �- Resolves: #1274367 - [7.3 FEAT] iprutils package update - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line�J��a�5�Jakub Čajka <jcajka@redhat.com> - 2.4.8-1U�J@- Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format�w��g� �Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-11d��- Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569� ��k�S�Pavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a�{�- Protect against negative values to memmove that caused "ipmitool sol activate" to crash against an IBM DataPower appliance (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519) Cherry-picked from upstream PR#78. ! L�)� ! � �� i�/�Sinny Kumari <skumari@redhat.com> - 2.4.16.1-1[(�@- Resolves: #1587834 - vpdupdate takes over an hour on system with 104 drive - Resolves: #1521052 - iprutils package update for POWER - Resolves: #1547891 - iprconfig unable to Download microcode on all applicable devices - Resolves: #1576013 - iprconfig tools shows wrong error message, while creating raid using RI SSDs and normal SSDst��i��Sinny Kumari <skumari@redhat.com> - 2.4.15.1-1Y� �- Resolves: #1456500 - iprutils package update to 2.4.15.1���i� �Sinny Kumari <skumari@redhat.com> - 2.4.14.1-1X���- Resolves: #1384382 - [7.4 FEAT] iprutils package update - ppc64/ppc64le���i�E�Sinny Kumari <skumari@redhat.com> - 2.4.13.1-1W�:�- Rebase to upstream release 2.4.13.1 - Resolves: #1369259 - Fix known zeroed state tracking�/��i�w�Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1W�t@- Resolves: #1364131 - Integrate various important bug fixes for iprutils in RHEL7.3 by updating iprutils to 2.4.12 p �?�dx � p w��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g��i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)\�� iS�Chris Leech <cleech@redhat.com> - 6.2.0.874-11\�@- 1649401, 1649413 iscsiuio updatesw�� [��Than Ngo <than@redhat.com> - 2.4.17.1-3]9��- Resolves: #1763626 - iprconfig hangs while raiding drives on crow3Y�� [[�Than Ngo <than@redhat.com> - 2.4.17.1-2\{��- Related: #1643408 - fix rpmdiff issue`�� [i�Than Ngo <than@redhat.com> - 2.4.17.1-1\w�@- Resolves: #1643408 - iprutils package update m�n � \��iS�Chris Leech <cleech@redhat.com> - 6.2.0.874-11\�@- 1649401, 1649413 iscsiuio updates}��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei��im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N��i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� ��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forking ! � y � ! �N�� i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �� i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g��i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition) w Y�k � w w��#i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���"i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g��!i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)}�� i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�� im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�� i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2) � m�n � }��)i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei��(im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��'i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N��&i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� ��%i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���$i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forking c o��{ � c � ��/i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���.i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��-i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���,i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g��+i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)� ��*i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning z -�� z ���5i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition� ��4i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}��3i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei��2im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��1i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N��0i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value � ��m� � � i��;im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��:i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N��9i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� ��8i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���7i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��6i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session S �s�k � S � ��Bi��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���Ai�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��@i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���?i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditionw��>i��Chris Leech <cleech@redhat.com> - 6.2.0.874-22a^�@- 1946578 fix segfault on case mismatch in config/record file� ��=i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}��<i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once , -�� � , \��IiS�Chris Leech <cleech@redhat.com> - 6.2.0.874-11\�@- 1649401, 1649413 iscsiuio updatesw��Hi��Chris Leech <cleech@redhat.com> - 6.2.0.874-22a^�@- 1946578 fix segfault on case mismatch in config/record file� ��Gi�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}��Fi��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei��Eim�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��Di�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N��Ci�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value ! � y � ! �N��Oi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� ��Ni��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���Mi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��Li��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���Ki�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g��Ji�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition) Y�k � w��Vi��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���Ui�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g��Ti�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)\��SiS�Chris Leech <cleech@redhat.com> - 6.2.0.874-11\�@- 1649401, 1649413 iscsiuio updates}��Ri��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei��Qim�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��Pi�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2) � m�n � }��\i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei��[im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��Zi�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N��Yi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� ��Xi��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���Wi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forking e �r+��V��: � � e D�J � d4448c84868ba851628434b5cedc79248ebbc6aeda79ecb6339065c844d6d809D�I � b41a681dfb0b8b82973c7815eeee4cc5e3fc5e27cb13f55d251186c29146a4f3D�H � 3e0a8c76f0c416e9b2f67cade48b3e2606a3fc3b47348110c033aa2cc1835a00D�G � 372372d382848eb9ecb5e551dd606aa646c12d3683f43b876ed5191e7a529c3eD�F � 77269448e020f6a70c9a9ee15224c6dffd91e47f8c5a0c05dc8281dec47ff3f1D�E � 447681bd8d74b001a4a5461694a948bba8dce453c2c054b8fb5d38408b7888a3D�D � 144001826455a5ca11b8e1701396ee66db5af5d0c7831453aba1309eb708a6c2D�C � 147c8de55409cc60a709e9f72364ee69759e7361564a732c0fd192e6fdd46d75D�B � 092cc13ed7af9de7e0332c1da0285f190396f1b75256ecd162899d06cf9b0e1aD�A � d65cdceba1822f154d19bc4845ed70da24d2b51bcaadb12af03fe2668101a3eaD�@ � ddf90c0ec436cf18228ba0646f73776e9a121426e0c05038fb1f4378646ff646D�? � e1163c5b5240558b24ddea7085492d62d63dd722ce6b4775724583c2ebcffdf2D�> � a551edad1e9e549e9010c83ff60ebed361a870676f10b405c22b4a301de84699 ! � y � ! �N��bi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� ��ai��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���`i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��_i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���^i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g��]i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition) a Y�k� � a ���hi�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g��gi�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)� ��fi�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}��ei��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei��dim�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��ci�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2) � ��m� � � i��nim�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��mi�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N��li�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� ��ki��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���ji�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��ii��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session � �a�S � � ��ti��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���si�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��ri��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���qi�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition� ��pi�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}��oi��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once � -�� � w��zi��Chris Leech <cleech@redhat.com> - 6.2.0.874-22a^�@- 1946578 fix segfault on case mismatch in config/record file� ��yi�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}��xi��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei��wim�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��vi�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N��ui�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value f s�e� f �"�� i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N��i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� ��~i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���}i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��|i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���{i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition - ��� � - ���i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g��i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)\��iS�Chris Leech <cleech@redhat.com> - 6.2.0.874-11\�@- 1649401, 1649413 iscsiuio updatesw��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-22a^�@- 1946578 fix segfault on case mismatch in config/record file� ��i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei��im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement � ��m� � � i�� im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�� i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�� i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �� i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��� i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session s �� � s � ��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session���i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g��i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)}��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once z -�� z ���i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition� ��i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei��im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"��i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N��i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value � ��m� � � i�� im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�� i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�� i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �� i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening���i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw��i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session z �s� z � ��$��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��#���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)w��"i��Chris Leech <cleech@redhat.com> - 6.2.0.874-22a^�@- 1946578 fix segfault on case mismatch in config/record file� ��!i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�� i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once �/ � ���)��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��(�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��'��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��&�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��%��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��.��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��-��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��,� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���+��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��*�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���4��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��3�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���2��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��1�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��0��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��/�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��8�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��7��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��6���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��5� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��>� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���=��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��<�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���;��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��:�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��9��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��C�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��B��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��A�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��@��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��?���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��I��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��H���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��G� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���F��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��E�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���D��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��L��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��K���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��J��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � ���Q��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��P�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��O��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��N�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��M��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��V��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��U��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��T� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���S��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��R�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���\��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��[�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���Z��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��Y�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��X��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��W�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��`�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��_��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��^���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��]� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) e �r+��V��: � � e D�W � 68ad96ff2728b35a2bfef5e46685a550d379ee6937f9081450a2c2f4c5e5c68cD�V � 562577dc40b07d4f6bfc5f0a837b2a0772968b369b1e30f1b6c11338772ecc1aD�U � 0daf2f065c20c572dbd4c2cd864cef8c197f640a926ce017c7343205b4e5e77dD�T � 9f2c5064a36e0190d1fb7f175cee62952c7e32951856a1ec5c9a427f2148aac2D�S � df41fca55a3d1bff5343ac8fd47f2dabaf9e5da86bb0851f46af715e74c7cd59D�R � eeff2dd2126e05da5903de0991d891313049be87f35dda8f67c383779761163fD�Q � 829050a62694fea5287076cdabeec66b15fe994809fcdd5931ebb992d47fecd4D�P � dd6a74f8a692f2fe556164b50fc2c03bcb46f1e09f4aa5d99bc036cfaf80970fD�O � 7454f4ffa83154415c00c37d9cb1e5e253feeb7dd34081b445318d2340ae4e42D�N � a7388c34d0bff23da18ea8026b4ad61a7789dc2606148be90e9c8b6440e41fbdD�M � f6017656fae735dfc5831c4b635cb2dda2cae8615a1d0a4b66898f7a6b9f168bD�L � bbd3efd923fc7315be5c5ab97b3a2459859dcca70068d448ba1d7a8aca4b9af0D�K � 6d01edd55d9f52f8ba1366e53274676bc33d48854b4465e49a15f474ddd0672f '�� � {��f� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���e��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��d�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���c��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��b�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��a��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��k�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��j��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��i�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��h��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��g���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��q��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��p���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��o� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���n��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��m�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���l��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��t��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��s���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��r��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � ���y��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��x�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��w��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��v�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��u��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��~��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��}��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��|� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���{��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��z�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 �����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t���i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�� ��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F���� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(����O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M�����Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��� ��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�� �[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��� ��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�� �i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�� ��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t���i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1����]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M�����Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1����]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M�����Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � �� ��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�����Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^����5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � ���!��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�� �i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�� ��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F�� �� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�� ��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��&��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��%��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��$� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���#��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��"�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���,��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��+�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���*��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��)�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��(��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��'�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��0�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��/��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��.���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��-� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��6� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���5��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��4�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���3��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��2�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��1��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��;�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��:��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��9�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��8��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��7���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��A��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��@���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��?� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���>��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��=�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���<��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��D��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��C���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��B��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 bR 5RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ρ�n Ё�t с�z ҁ� Ӂ� ԁ� Ձ� ց� ׁ� �$ ف�) ځ�. ہ�4 ܁�8 ݁�> ށ�C ߁�I �L ၄Q ⁄V い\ 䁄` 恄f 灄k 聄q 遄t ꁄy 끄~ 쁅 큅 � � �! �& �, ���0 ���6 ���; ���A ���D ���I ���N ���T ���X ���^ ��c ��i ��l ��q ��v ��| �� �� �� �� �� �� �� ��$ ��( ��. ��3 ��9 ��< ��A ��F ��L ��P ��V ��[ ��a ��d ��i ��n ��t ��x !��~ "�� #�� $�� %�� &�� '�� (�� )��& *��+ +��1 ,��4 -��9 .��> /��D 0��H 1��N 2��S 3��Y 4��\ �/ � ���I��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��H�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��G��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��F�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��E��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��N��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��M��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��L� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���K��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��J�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���T��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��S�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���R��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��Q�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��P��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��O�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��X�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��W��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��V���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��U� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��^� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���]��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��\�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���[��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��Z�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��Y��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��c�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��b��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��a�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��`��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��_���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) e �r+��V��: � � e D�d � 1316ac625663f9009c64a89e399d60b4191a5bea7e69797e85132da3ccbcbc77D�c � a714e0889c00122a44ccbbd66032e67123e1f75d8cdad594e32de4c09400de94D�b � 60e92e4b5eccd578699334e15aeedbd39648619e8c4fcfdafec19e48fe080697D�a � c5658a365bac1d6a010849f23983b9904b689b2d9191ee2bb6e12c828ec3855dD�` � 973367a3a9c98b25bdcff626cce24fd23fe78725e3f446889ec5a9091fc9c005D�_ � 21ed5458a8abe02695e7c68bd4c068debb35056a454d12b095dcc9c2dd435449D�^ � 236b16f4eff9a720f06ea780d58be74598f1326a04d143dea2ea6a3bf5dfb061D�] � 467ea07622b7bd1dc0694405f23e3047a904f677d60e58b4778fc8e889c2d224D�\ � a746cbe3d7985ed9de3d8ea2565a0ba9d0e55c9e16d298d608b40797a31b231bD�[ � 4bf12266defcaeaaa70a5bbe431d815b7c435f5f95d2be12d8be7de214533e53D�Z � 0fa3ba7dae428c14500eba9a62de5fd03fb07234b8db1fea572d45fa78f0e0d7D�Y � 4a764611d924b3be2baab6d6ffd5fc562fe6a7c2c08cede4d58bb7259f7a0f35D�X � fe20198b1c59cd2bd81f50412b770ffdbe657e59f816450e2235e0863704f4d5 H `�O� � H �1��i��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��h���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��g� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���f��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��e�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���d��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��l��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��k���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��j��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � ���q��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��p�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��o��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��n�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��m��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��v��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��u��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��t� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���s��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��r�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���|��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��{�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���z��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��y�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��x��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��w�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F�� �� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(����O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��~���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��}� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t���i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t�� �i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�� ��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F�� �� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1����]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M�����Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1����]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M�����Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�� �[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��� ��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ����+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�����Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^����5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � �����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t���i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(����O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(�� ��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �� ��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){�� � o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���$��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��#�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���"��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��!�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�� ��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F�� �� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��(�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��'��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��&���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��%� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��.� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���-��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��,�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���+��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��*�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��)��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��3�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��2��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��1�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��0��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��/���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��9��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��8���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��7� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���6��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��5�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���4��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��<��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��;���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��:��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � ���A��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��@�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��?��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��>�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��=��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��F��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��E��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��D� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���C��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��B�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���L��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��K�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���J��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��I�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��H��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��G�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��P�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��O��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��N���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��M� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��V� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���U��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��T�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���S��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��R�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��Q��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��[�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��Z��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��Y�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��X��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��W���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��a��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��`���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��_� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���^��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��]�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���\��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��d��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��c���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��b��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 e �r+��V��: � � e D�q � ed293f56a8fa1ff864e007c158a2833d672efa0618a2cd57b24f8ee570b7df80D�p � f9157874165a2f0bfd45d4225d6b6665f3447d99d8b0b7c31b884b462c45218eD�o � 3f3a9c60625ad194ae3406fcef007e24a583db933f244ad66404e2ce22e8628bD�n � 4214383e3e5d362039f4752421a5c4dd66c7a5aad772859a41684a0b984c5373D�m � b91c19d3211778e075a890f5366a6f8e279f0f8516238accd9f976e88ae5d259D�l � 203db2e870a8753e2c1ba5897367c0822ee2a5c79b866fa6486effebd9f23b96D�k � c21af136e37b18345d2d844866515fe9c44bedd736b4e98701ea2e6a2210c5a4D�j � e26a698ca51f4049464d83df1c17062a826cf136c188c2d3994ed01f90974ab6D�i � 55b8fbe53a3211935d82bafb555f9585fbe02d4aad743ea7bfe9b68c31fff322D�h � 7046aa1eabc63c20c57732ab2750fd10c21bc29fbb4198fbd9497b0323bb525dD�g � 71ab07234942e8c84134be2b225f1e3f417e7974f4dcf6a080e9820b68b1b81cD�f � 247fc0e92238ee99057179d386718ac73601d9dcbbf86ef80e98ec27d4c7d86fD�e � 3820c04e5244db590096c735cfebaf9c275d7ef5d644f71712940bd565f671e7 �/ � ���i��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��h�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��g��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��f�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��e��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��n��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��m��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��l� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���k��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��j�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���t��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��s�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���r��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��q�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��p��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��o�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��x�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��w��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��v���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��u� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��~� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���}��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��|�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���{��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��z�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��y��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t���i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1�� ��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M�����Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1�� ��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M�����Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � �� ��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�� ���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^�� ��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � �����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t���i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�� ��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(����O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ����+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ��� ��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t���i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F�� �� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�� ��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M�� ���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){�� � o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��&� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���%��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��$�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���#��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��"�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��!��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��+�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��*��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��)�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��(��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��'���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��1��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��0���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��/� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���.��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��-�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���,��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��4��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��3���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��2��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � ���9��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��8�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��7��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��6�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��5��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��>��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��=��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��<� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���;��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��:�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���D��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��C�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���B��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��A�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��@��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��?�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��H�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��G��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��F���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��E� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��N� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���M��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��L�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���K��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��J�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��I��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��S�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��R��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��Q�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��P��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��O���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��Y��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��X���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��W� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���V��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��U�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���T��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��\��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��[���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��Z��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � ���a��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��`�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��_��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��^�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��]��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��f��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��e��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��d� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���c��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��b�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) e �r+��V��: � � e D�~ � cc95d52dd6acca1790e3c4f0dd8c26d939c93423de333d2066dece7bf767d545D�} � 22bfec4ae12f95ec0baa30ad642504987294442f2a28150fd5c850b8aeb04373D�| � 5e65bcb053440eb744a0b29be0f36cc5c82a7fab303e26ad6ee2a714bfd4651cD�{ � ab9a79dcba43eba518e5c0bd8261fae155c1951f0d9f9de1194a57e26a1c43f4D�z � 9a949108d90656bc8587b16aed99265931bfd33e4912eebc815b4acd99d709f0D�y � e6ffa74bab49f49dde242d6ce151c85a071ed9f55bbfe61e19f182d53a82496cD�x � 081e9334981d1b4b5c7b0096cade8b94d105829885494e80e9e2ca16d37b30a4D�w � 544b35d1b0c600d66cc166c5f116fe849ac376a65105997c84d89296afb22861D�v � 48b1742bdd262f815457ccce6a8412a9c65dc9affb811fc52a31da14b7fe7f4eD�u � 740cba8784afe4330523ae1c3ed41bce93c5537dad8f467cf1fdc17ea21f53e1D�t � ffd9abc7bf1c18a5121be12799691f3e50e09ec00e67de327db03a1cf7a29d6cD�s � 9653063ff86adaa3cf63420a5d68c5ebb55e16a3bbe27a79314e37a1bf604fdfD�r � bb99b24bb6932637a09babfa34970f02619096864977bef0bf48a0e701ea428a 3 5\�D � 3 ���l��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��k�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���j��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��i�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��h��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��g�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��p�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��o��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��n���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��m� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��v� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���u��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��t�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���s��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��r�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��q��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��{�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��z��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��y�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��x��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��w���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1����]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M�� ���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���~��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��}�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���|��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ����+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�����Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^����5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � ��� ��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t���i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(����O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(����O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �� ��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){�� � o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��� ��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�� �[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 �����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t���i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F���� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(����O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M�����Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {�� � o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��� ��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�� �[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t���i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��#�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��"��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��!�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1�� ��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M�� ���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��)��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��(���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��'� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���&��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��%�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���$��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��,��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��+���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��*��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � ���1��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��0�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��/��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��.�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��-��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��6��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��5��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��4� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���3��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��2�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���<��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��;�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���:��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��9�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��8��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��7�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��@�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��?��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��>���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��=� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��F� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���E��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��D�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���C��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��B�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��A��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��K�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��J��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��I�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��H��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��G���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��Q��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��P���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��O� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���N��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��M�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���L��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��T��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��S���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��R��5�Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � ���Y��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��X�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��W��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��V�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��U��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(��^��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ��]��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��\� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���[��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��Z�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ���d��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��c�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���b��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��a�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��`��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��_�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F��h�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��g��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M��f���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��e� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) e �r+��V��: � � e D� � fde70f28b5a0ce727403a12e9a6a39a8f953d1975000b7be4be8c5434c4d3556D� � 830680293bf892ad9b57630cd1fd50d4415343677c361c32b8b849c399daeb14D� � c38c420b6dbc3c61cd71784ca87f3a88f4a61d461e77b66508742c89d1d7e1fdD� � ec2503de79ebe13134bfc568d71d9a2c99d9f6d109eb2f80a8198fb2e331bb9fD� � a2e99881f1afb105ba6355f4eef86e839d3ccf60d9543490c748c71e96cb2256D� � c017fccf387f4e86a1ff26de3d85c015ae1bdfc53bf1e30acf131d4aa4f5011fD� � 83e709af69a954f17415b836c06c639e57234896cfbc5a9d849530590fd960efD� � d512882b1e6a2e0854dd99d20a3bdcbbfa71dd8002a9647e11460a803a49a486D� � f563d696d882905f6633fed7a3fe77d0876a29170b14175715b53e21a84887b1D� � 591c8ad60cbb62f0c95441ec820072142ae5392cedd248fc81f71eb1d8a699fbD� � 13c3f114dacf10594cbfa9365b4107f3ea7e4dbc3dd4f7d0362049b983ea8f56D� � 33293b1fe8b0638219c4a88ea8d7217eb55c5b4e227d7945c14a9121db97e4d1D� � 9fc87325642e8e0a01c8a46507e124f43ad0d86942ddd1f2e5d1722588e7359c '�� � {��n� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���m��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��l�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���k��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��j�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��i��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t��s�i Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T��r��' Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��q�� Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1��p��]�Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��o���Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��y��] Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M��x�� Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){��w� o Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)���v��5 Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��u�[ Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)���t��5 Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) $ G$ � ��|��+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q��{��Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)�^��z��5 Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 �/ � �����5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�� �iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F��~�� Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(��}��OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package ��pM �(����OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ����+Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438){��� oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410) 3 5\�D � 3 ��� ��5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�� �[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��� ��5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�� �iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386) � ��� � �F���� Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(����OJan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package�M����Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){�� � oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787) '�� � {��� oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)�����5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m���[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)�����5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t���iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) \ .x� � \ t���iJan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T����'Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)�F���� Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�1����]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M����Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-80.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250) H `�O� � H �1��!��]Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-82.git78c0348e���- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)�M�� ��Rado Vrbovsky <rvrbovsk@redhat.com> - 20200421-81.git78c0348e:T�- Cross-Process Information Leak (RHEL-8938) - Return Address Predictor velunerability leading to information disclosure (RHEL-9250){�� � oAugusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��� ��5Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�� �[Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��� ��5Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818) � `�T � � ��&Y�)Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��%Y�Jarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��$Y�?Jarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��#Y�Jarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274�^��"��5Denys Vlasenko <dvlasenk@redhat.com> - 20200421-83.git78c0348fXj@- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021 u %�0� u ���,[�OHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699���+[�CHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��*[�;Honggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b��)[mHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��([�;Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��'Y�UJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296 � �&2 � ���0� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��/� �UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��.� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���-� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��4� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��3{�UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���2� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���1� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ 6��f 8��l 9��p :��v ;��{ <�� =�� >�� ?�� @�� A�� B�� C��# D��) E��, F��1 G��6 H��< I��@ J��F K��K L��Q M��T N��Y O��^ P��d Q��h S��n T��s U��y V��| W�� X�� Y�� Z�� [�� \�� ]��! ^��& _��, `��0 a��4 c��6 d��: e��> f��@ g��E h��G i��I j��N k��Q l��S m��W n��[ o��^ p��b q��f r��j t��m u��r v��u w��x x��} y�� z�� {�� |�� }�� ~�� �� ��� ���# ���' ���+ ���. ���3 ���6 ���9 ���= ���@ ���D ���G ���J ���N ���Q ���T ���V ���Z ���] ���_ ���a ���d ���g ���i ���m ���p ���r ���t � � � �:��6�wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��5�yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � �&2 � ���:� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��9� �UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��8� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���7� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��>� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��={�UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���<� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���;� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:��@�wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��?�yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 r /;� r ���E� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���D� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���C� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��B� �UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��A� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 " T" �-��G� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��F{�UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � � �:��I�wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��H�yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 W Kz� � W ���N� �! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���M� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��L� �U Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��K� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665�0��J�cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � f�� �-��Q� �Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��P{�U Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���O� �! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665 � � � �:��S�w Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��R�y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 : K� � : �:��W� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��V� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���U{� Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690�0��T�c Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � Aa� � �:��[� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��Z� �+ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��Y� �- Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��X� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903 ` ��` ���^�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��]�Y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��\� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903 0 x� � 0 �:��b� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��a� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��`� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���_{� Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 q A� q � ��f� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��e� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��d� �+ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��c� �- Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 � q� � �:��j� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��i� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081���h�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��g�Y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 e �r+��V��: � � e D� � e6bd9014923fd5db4edcfc633f2800d2d9eda0bd0b416f22bfe615c9c8abf000D� � 9c883d2d32a12c3f672b6e40119adf476d62ae4bacb40ce0a88634b864d19701D� � bbc54477e470a694a3032e391624ba33b9753f81d283b60a19dca7c1c52b35c4D� � efd5c472cec8f06ea30eaa8cef287b401fcdf4b0a30e6b2531888ea03f1f9549D� � ef07f2b266e0d616931d672568f5c39d7789f51adb7332df77df77b19e7882a4D� � e9fa16cde65d0d202fe417fb0585d64a534cd25d39e715a1fb32a75e6620e475D� � dfee136c3e1717a2003cc2ab23a101250a304de173d85ce35e611d5481bc08efD� � e43708faf11f54060a6b8d9ee565f6c43fdf9b7c1d5537257443dcfe58320462D� � 880ff35253177a36cd35ad8763cde4cb91281f1e945561e8856f21de6d706dbbD� � bea9e14dd6778afded7cb4e5d5a5f3fa3b0fefe9bafbf913cd21dd494fc8a966D� � 2ef14c819a2c602bcce68d1f84b1e8143bb560f7737ba254e3b07d9c4302af67D� � c5741b7e80a2b537f19292e12c2a7fc0a403f25be8a24c117ecec3e7b88a182aD� � bc12fc1a4e756efa8689dfeed9925dee6bea368e4e5e865c6972641a3d1f894d B �+ B �d��m� �? Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��l� �Y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���k� �+ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 4 A�� � 4 ���r�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��q�Y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��p� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��o� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��n� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081 c A�c ���u� �+ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��t� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��s� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Ja � �:��x� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��w� �? Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��v� �Y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 g A�� � g ���}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���|�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��{�Y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��z� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��y� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 � ,m� � �r��� �[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�� � �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��~� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � AR� � �:��� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��� �KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �]� � �:�� � �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024����'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 � AJ� � �j�� � �KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�� � �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r�� � �[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�� � �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � A�k � ����1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735����'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 �6x � �"��� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735 Z BPq Z ����'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 dX� � �9�� � �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� � �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�� � �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735����1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 � Y�� � �Z��#� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��"� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��!� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�� � �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 � �+m � �9��'� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��&� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��%� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���$�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Y�� � �Z��+� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��*� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��)� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��(� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 0 �� 0 �_��.�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��-� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���,�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 a B�� a �9��3� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��2� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��1� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��0� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��/� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 / ���6�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��5� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��4� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 � �G � �"��9� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_��8�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��7� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 Z BPq Z ���=�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��<� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��;� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��:� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��@� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��?�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��>� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � >/� � �9��D� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��C� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� ��B�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��A� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 / ���G�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��F� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��E� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 q �G q �Q��J� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��I�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��H� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 >/q �m��N� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��M� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� ��L�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��K� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � ! � �P��Q� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���P�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��O� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��T� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��S� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��R�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��V�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 Z BPq Z ���Z�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��Y� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��X� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��W� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��]� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��\�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��[� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��^� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 ~ p ~ �m��a� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� ��`�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � ! � �P��d� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���c�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��b� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��g� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��f� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��e�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��h�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 g O]~ g ���m�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��l� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��k� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,��j�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 e �r+��V��: � � e D�% � 339e96b8a52bc311433f3ed0ce535dd62f4808232fb75bf0eaf2b4f0cd82f726D�$ � 04a4cfccd1c263a0f3de420c2200f1e9d5485e3f5734a0c08f2c01c3be01b144D�# � 230daa889ac4a0bede450aeb0258b6c9db6746486271506eb2037b877bbce588D�" � 40afa7c237d384eb15a196fb651eecd913e28b743ba7734e05849c45323ff597D�! � a58a0b8408d78f804c67f0633541c402b9020555a4986e3fde782bf8544f5f06D� � e4b6df13c59f0686bb12ef575deeaeb4ba581e4d0dd1d2595bf0d7ed9ad2e65fD� � e8b67a41970fcee6a5eee5fa362a4648b27e47a04ae221fba0de5f5bc2c64e37D� � 0ec52bd7a95347c5c330df35b5067f28cdd262383f84e176598367ad11c98a27D� � 4e6c5997489d089dba27aefe96602ec7208298c2e48067c3ef634fd5a6da5f0dD� � 7a53443e34cc7fe98a4371e9025389c86bc36e38ca424a98b85b4224bbcac1c8D� � f261f44a0301705f4e2b2a56556cdb340ae2487517c8ca12013301b3a983bd58D� � bd48e9a406f3a105ecd028149cc4b8df348dc33f19ec4151daa74115a22b11feD� � 7a967bdf7823255236452e9a45977d7f6c253c9f3c88f18a80ae1ceb606319fd q �G q �Q��p� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��o�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��n� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��r�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��q� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��t�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��s�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 0 �� 0 �_��w�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��v� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���u�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 Y *hY � ��z�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��y� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��x� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��|�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 7 ����'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M��~� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��}�gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 q �G q �Q��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,���[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 7 � �_�� �A Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M��� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 Y *hY � �� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� � �q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� � � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,���[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��� �C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 ) � ) �_���A Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n���_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 Y *hY � ��� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,���[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��� �C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q�� � � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n�� �_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 / >/ � �� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� � �q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��!�[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��$� �C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��#� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��"�g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��%�_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � d � �Q��'� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529���&�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 / >/ � ��)� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��(� �q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��+�[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��*� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��.� �C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��-� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��,�g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��/�_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 d d ���0�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � p � �,��2�[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��1� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��5� �C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��4� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��3�g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��6�_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���8� �} Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���7�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 F ?F �t��:�k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��9� �o Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � p � �,��<�[!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��;�!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��?� �C!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��>� !Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��=�g!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��@�_!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���B� �}!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���A�1!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 t ?Ft �M��E� "Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�t��D�k!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��C� �o!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 �f��F� �C"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191 � � �n��G�_"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���I� �}"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���H�1"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���Lq�A"Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��K�k"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��J� �o"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���N�3"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��M�M"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 C .C �f��P� �C#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��O� #Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 � � �n��Q�_#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���S� �}#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���R�1#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���z ���| ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���! ���$ ���% ���' ���) ���+ ���. ���/ ���0 ���2 ���5 ���6 ���8 ���: ���< ���? ���@ ���B ���E ���F �G Á�I ā�L Ł�N Ɓ�P ǁ�Q ȁ�S ʁ�V ˁ�X ́�Z ́�] �_ ρ�b Ё�d с�g ҁ�i Ӂ�l Ձ�n ց�q ׁ�s ہ�v ܁�x ݁�{ ށ�} ⁌ が 䁌 偌 恌 灌 职 遌 ꁌ 끌 쁌" 큌% ' + �/ �2 �6 �: �> ���A ���F ���I ���L ���Q ���U ���Y ���] ���a ���e ���j ��n ��s ��w ��{ �� �� �� �� ) ?F) ���Vq�A#Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��U�k#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��T� �o#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���X�3#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��W�M#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 \ d \ ���Z� �}$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���Y�1$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���]q�A$Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��\�k$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��[� �o$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���_�3$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��^�M$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��b� �?$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��a� �g$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��`� $Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 \ d \ ���d� �}%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���c�1%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���gq�A%Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��f�k%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��e� �o%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���i�3%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��h�M%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��l� �?%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��k� �g%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��j� %Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 e �r+��V��: � � e D�2 � fec7ec65b7db46bf359cb0e984f68dfa1d760320e274306052a510c5d288ed1aD�1 � 55baaa197af05067cb206423655392e7b0a52e3ee9144a1fde30de40eb599d5aD�0 � 3f7b46638efdb99c13fe45aa513af69cad728c4ffca568196d21fed273ba7f97D�/ � c50443dc25797f6103ba04c6929511b3b0ddfbc2d0ba5c3b956094079715ca98D�. � 5aa6c18760291c5e22fa5fd2f7960f92c9547071b62e9766ae30bbe111f5e714D�- � 824340802392135f9a064de630acd55a619c7b8240b3aa7ae13f664637c0f023D�, � 2bf9825999c7f3930c1032ad0b77786e49c18ee2996e142adc2d28d3b61709edD�+ � 3278f8dbfd0afa8e751afeffde943cb66ed2c2a57495f39ce66a95c3bf852edeD�* � 542eec90efcf10ac7a2c505eed834595826e5ac255df60ccfed65594368d644cD�) � 3a95d1dbf8e717a5e29b32daea78a11867867d80343e09ffc29f6c9dedd70720D�( � 4261abb467f2744c5f43003c5dff6813e00cd4a52c72325f233dddfa3008e983D�' � dc69ec026bc1c217d4ab702f2ab40cc5fe01355f2ba29351877fb7a58751e541D�& � 0ee22c6eb0445485cec58e7d73154100a461cce8a0bf2a9e3b8350e6ad3d073e 9 � 9 ���n�3&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��m�M&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��q�?&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��p� �g&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��o� &Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��s� �&Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc O��r� �&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 �eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��v�g&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��u� �&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��t� �e&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr � 9 � 9 ���x�3'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��w�M'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��{�?'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��z� �g'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��y� 'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��}� �'Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc ߁O��|� �'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 �eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2�� �g'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��� �'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��~� �e'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr � � �&2 � ���� �(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��� �U(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� �(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���� �(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��� �Q(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��{�U(Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���� �!(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:�� �w(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�� �y(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � �&2 � ���� �)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� � �U)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�� � �)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��� � �)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��� �Q)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��{�U)Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���� �!)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:���w)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{���y)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 r /;� r ���� �!*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���� �*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��� �U*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� �*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 " T" �-��� �Q*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��{�U*Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � � �:�� �w*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�� �y*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 W Kz� � W ���"� �!+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���!� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� � �U+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�� � �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665�0�� �c*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � f�� �-��%� �Q+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��${�U+Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���#� �!+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665 � � � �:��'�w+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��&�y+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 : K� � : �:��+� �k,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��*� �,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���){� ,Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690�0��(�c+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � Aa� � �:��/� �k,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��.� �+,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��-� �-,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��,� �k,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903 ` ��` ���2�7,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��1�Y,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��0� �,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903 0 x� � 0 �:��6� �k-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��5� �k-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��4� �-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���3{� -Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 q A� q � ��:� �-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��9� �k-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��8� �+-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��7� �--Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 � q� � �:��>� �k.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��=� �k.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081���<�7-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��;�Y-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 B �+ B �d��A� �?.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��@� �Y.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���?� �+.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 4 A�� � 4 ���F�7.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��E�Y.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��D� �k.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��C� �k.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��B� �k.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081 c A�c ���I� �+/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��H� �k/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��G� �k/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Ja � �:��L� �k/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��K� �?/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��J� �Y/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 g A�� � g ���Q�0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���P�7/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��O�Y/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��N� �k/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��M� �k/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 � ,m� � �r��U� �[0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��T� �k0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��S� �k0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��R� �0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � AR� � �:��Y� �k0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��X� �k0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��W� �K0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��V� �k0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �]� � �:��]� �k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��\� �1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���[�1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���Z�'0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 � AJ� � �j��a� �K1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��`� �k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��_� �[1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��^� �k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � A�k � ���e�12Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735���d�'1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��c� �k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��b� �k1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 �6x � �"��j� �;2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��i� �i2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��h� �i2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��g� �i2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���f� �2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735 Z BPq Z ���n�'2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��m� �+2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��l� �Q2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��k� �i2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 e �r+��V��: � � e D�? � 58f0137ac65f40eaa3ff281ba91bb68d78f71041a8ab7a9d08578d3ba06cc792D�> � 054e750bc6d0c6d60f45a6fb60b3bc08bf7902623d269b106db0969e6a028abbD�= � 56e522d6f6a849ac7522778022a72719f7d1b252990db7cf3bed6b06f753b096D�< � 4f005504d21283f588231c70d4fdfecc7393a4b60fa72b1498f6aba2985e1d0bD�; � 46de5f99129eb78da5ff4975f706a21b2b68e99ac0a5aba0c19ea1b67daa44c9D�: � 3831827b92fb33007bdf9bb579f1947d04221cf988fdfd40615012e00b9500a3D�9 � 89218a788c99c93aaa563b09b3f7b71ed061025bda32116e0f5ad78d034e5d94D�8 � 086c33b98ecb7adbc59297b29fb3fc219e4beda421611ef17471f6cc8e0a9b6fD�7 � 98887262492c65c2f5769777ce9b0419c04f0f6dbf264e6ea58451ec3eb69bd6D�6 � 6b024502ff2b69fb4876076ce49575439e5b94cae11c486cd7c59b464106d825D�5 � e648ee67624dc2ef09455b433a6f9e43ed3a673d6a32275422c2cd824c5d2e02D�4 � b62cc8d7fa7e89475ac858e1c622dd266841dcd23fd2841b274d435990854ddeD�3 � 3c68468d65b23e5a50cce88db5e3d11674fb488c8e0bf375200f6f529c438a20 dX� � �9��s� �i3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��r� �i3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��q� �i3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���p� �3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���o�13Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 � Y�� � �Z��w� �+3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��v� �Q3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��u� �i3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��t� �;3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 � �+m � �9��{� �i4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��z� �i4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��y� �i4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���x�'3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Y�� � �Z��� �+4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��~� �Q4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��}� �i4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��|� �;4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 0 �� 0 �_���A4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� �4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��� �'4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 a B�� a �9��� �i5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �i5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��� �i5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �i5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 / ��� �'5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� � �+5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 � �G � �"�� � �;6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_�� �A5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� � �5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 Z BPq Z ����'6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �i6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��� �6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� �6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � >/� � �9��� �i7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� ���6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 / ����'7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 q �G q �Q�� � �7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�� �A7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� � �7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 >/q �m��"� �Q8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��!� �i8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� �� �7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� � �q7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � ! � �P��%� �8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���$�'8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��#� �+8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��(� �q8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��'� �8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��&�A8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��*�8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��)�8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 Z BPq Z ���.�'9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��-� �+9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��,� �Q9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��+� �i9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��1� �9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��0�A9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��/� �9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��3�9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��2� �q9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 ~ p ~ �m��5� �Q:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� ��4�9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � ! � �P��8� �:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���7�':Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��6� �+:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��;� �q:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��:� �:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��9�A:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��=�:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��<�:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 g O]~ g ���A�';Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��@� �+;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��?� �Q;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,��>�[:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 q �G q �Q��D� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��C�A;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��B� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��F�;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��E� �q;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��H�[;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��G�;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 0 �� 0 �_��K�A<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��J� �<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���I�'<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 Y *hY � ��N�<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��M� �q<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��L� �<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��P�[<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��O�<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 7 ���S�'=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M��R� <Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��Q�g<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 q �G q �Q��V� �=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��U�A=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��T� �=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��X�=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��W� �q=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��Z�[=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��Y�=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 7 � �_��]�A>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M��\� =Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��[�g=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 Y *hY � ��`�>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��_� �q>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��^� �>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��b�[>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��a�>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��e� �C>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��d� >Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��c�g>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 ) � ) �_��g�A?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n��f�_>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 Y *hY � ��j�?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��i� �q?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��h� �?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��l�[?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��k�?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��o� �C?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��n� ?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��m�g?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q��q� �@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n��p�_?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 e �r+��V��: � � e D�L � 6982c05564f03f4db81df93b42eeb29b22e1c82675c42eaf1077f90bf1847c7aD�K � 2c301bfa4814d7a20e642e7fec605dacbeef49885fa13f382cd7c85e03e827dfD�J � 5c3e30fe5f331dff8d929397fe55cd6da4c97325fd1c26f6c51b2567a15414e5D�I � 556772de85dcdb8d7bf429e3cca280e03ffdcdd1ee99bff14fef8b64b6c102a5D�H � d76bb9d2f1d62a9fed452572a310fc87fca445e6330ebfd58bbedafcd6dc171bD�G � 6c8d7f6e3e1e16170883c18ddcbe50ef6eb86c9a8222fb7fe4f75b91670adc57D�F � be2cf27ae12e4ffcf8e8d79ef82ec36c4c7d67299d1b3bf9e1ceb0325e08de8bD�E � 0150773cdef45797820d481008b2e7297bc32060b190f3493a27354e52ffb8baD�D � f676e5412e87446863b10f16b82807f5a4324279353554edb7aeb3cfa9143061D�C � a33d9ecd05eaa2248f7384075877e78357534a302081fc03a9b5f0dcc71df48fD�B � 06d6c8fc8acd6bccaac9dcec5bc4fadf0a2b38f66fac335962e0352a7d2bf9bfD�A � 60647855ba6fb280673a3654ce82ab9610ce8bcdca3ea825ad3ea4023b200fdcD�@ � ea3f0bb12ce7b5c386ca301b0f16f7dddafa4ed5f63b2ab2cd2fe297d066f387 / >/ � ��s�@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��r� �q@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��u�[@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��t�@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��x� �C@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��w� @Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��v�g@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��y�_@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � d � �Q��{� �AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529���z�1@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 / >/ � ��}�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��|� �qAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,���[AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��~�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 bR uRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ �� �� �� �� �� ��" ��% ��( ��* ��. ��1 ��3 ��5 ��8 ��; ��= ��A ��D ��F ��H ��K ��N ��P !��S "��V #��X $��Z %��] &��` '��b (��e )��g *��j +��l ,��o -��q /��s 0��u 1��x 2��y 3��{ 4��} 5�� 7�� 8�� 9�� :�� ;�� <�� =�� >�� ?�� @�� A�� B�� C�� D�� E�� F�� G�� H��" I��$ J��% K��' L��* M��, N��. O��1 P��3 Q��6 R��8 S��; T��= U��@ V��B W��E X��G \��J ]��L ^��O _��Q c��T d��X e��\ f��^ g��b h��f i��h j��m k��o l��q m��v o��y p��{ q�� r�� s�� t�� L 7 L �f��� �CAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�� �gAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n���_AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 d d ����1AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � p � �,���[BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ���BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f�� � �CBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���gBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�� �_BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ��� � �}BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��� �1BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 F ?F �t���kBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� � �oBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � p � �,���[CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ���CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��� �CCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���gCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n���_CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���� �}CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 t ?Ft �M��� DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�t���kCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �oCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 �f��� �CDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191 � � �n���_DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ��� � �}DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��� �1DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ��� q�ADJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t�� �kDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� � �oDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���"�3DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��!�MDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 C .C �f��$� �CEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��#� EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 � � �n��%�_EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���'� �}EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���&�1EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���*q�AEJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��)�kEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��(� �oEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���,�3EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��+�MEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 \ d \ ���.� �}FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���-�1FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���1q�AFJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��0�kFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��/� �oFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���3�3FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��2�MFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��6� �?FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��5� �gFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��4� FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 \ d \ ���8� �}GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���7�1GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���;q�AGJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��:�kGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��9� �oGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���=�3GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��<�MGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��@� �?GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��?� �gGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��>� GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 9 � 9 ���B�3HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��A�MHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��E�?HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��D� �gHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��C� HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��G� �HThomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc Y�O��F� �HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 [eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��J�gHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��I� �HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��H� �eHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr Z 9 � 9 ���L�3IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��K�MIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��O�?IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��N� �gIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��M� IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��Q� �IThomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc `�O��P� �IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 beam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��T�gIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��S� �IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��R� �eIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr a � �&2 � ���X� �JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��W� �UJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��V� �JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���U� �JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��\� �QJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��[{�UJJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���Z� �!JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���Y� �!JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:��^�wJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��]�yJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � �&2 � ���b� �KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��a� �UKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��`� �KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���_� �KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��f� �QKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��e{�UKJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���d� �!KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���c� �!KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:��h�wKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��g�yKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 r /;� r ���m� �!LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���l� �!LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���k� �LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��j� �ULAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��i� �LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 " T" �-��o� �QLAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��n{�ULJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � � �:��q�wLAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��p�yLAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 W Kz� � W ���v� �!MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���u� �MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��t� �UMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��s� �MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665�0��r�cLAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 e �r+��V��: � � e D�Y � e1931c2c08f74962ec1d742c785c518f1942b86d552b9e27d9cb776d4c555f8aD�X � 758d2c3a908dc2f48b1ab2c25ec323231a54e2b646281ebbd88192b61617775eD�W � 518082fd34ea1c14e44917a04af17aa6e3307369f369dbe369f0fdf4e5b8e1eaD�V � 5013f655f5321c66d30f6ab553d640e8a1df541105200e36eeae415ca903a7acD�U � f97dd6a530e0dc37dde8d1e71e04e877196e4f36ac6754904cd6a5e8e0e4990fD�T � 9512843f182c5c1950953d11669afc9c97394a90e3b4ebda1834fab7b5a97d88D�S � 5001584535af6ba52a00d1913b2b5f60df1239116a2cbcff84db48a9359bd3a3D�R � c6fc833a542f540c1edc0431e34f06b0cd121fc635294ae62ae5d48fab254ddfD�Q � 242b3c3eb9d45d48b5e607845d5fbc380afca79449f49cf9cd801ea4a95ef419D�P � 124b95517eeee9deb9fa4cef2707b16c5530d6c6f263462b2c3deb2f8811b3d8D�O � 917745f55091ed42757a3d445e0f98ebd8e84ff75ab716acbdd8f6e1c584a8fdD�N � 2e1ba328190cee6e94f98145224aec06902152d1cc3188f06c1ac84dc0887d0bD�M � 7a5f1f1bd0da49fe22b1022a7bf998826161eacca343e82125f1b036b9cdbdac � f�� �-��y� �QMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��x{�UMJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���w� �!MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665 � � � �:��{�wMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��z�yMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 : K� � : �:��� �kNAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��~� �NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���}{� NJiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690�0��|�cMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � Aa� � �:��� �kNAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��� �+NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��� �-NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:�� � �kNAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903 ` ��` ����7NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k���YNAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��� �NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903 0 x� � 0 �:�� � �kOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�� � �kOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��� �OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���{� OJiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 q A� q � ��� �OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�� � �kOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z�� � �+OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�� � �-OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 � q� � �:��� �kPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��� �kPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081����7OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k���YOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 B �+ B �d��� �?PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��� �YPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���� �+PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 4 A�� � 4 ����7PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k���YPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��� �kPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��� �kPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��� �kPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081 c A�c ��� � �+QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:�� � �kQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��� �kQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Ja � �:�� � �kQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�� � �?QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1�� � �YQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 g A�� � g ���%�RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���$�7QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��#�YQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��"� �kQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��!� �kQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 � ,m� � �r��)� �[RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��(� �kRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��'� �kRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��&� �RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � AR� � �:��-� �kRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��,� �kRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��+� �KRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��*� �kRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �]� � �:��1� �kSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��0� �SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���/�SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���.�'RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 � AJ� � �j��5� �KSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��4� �kSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��3� �[SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��2� �kSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � A�k � ���9�1TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735���8�'SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��7� �kSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��6� �kSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 �6x � �"��>� �;TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��=� �iTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��<� �iTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��;� �iTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���:� �TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735 Z BPq Z ���B�'TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��A� �+TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��@� �QTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��?� �iTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 dX� � �9��G� �iUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��F� �iUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��E� �iUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���D� �UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���C�1UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 � Y�� � �Z��K� �+UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��J� �QUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��I� �iUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��H� �;UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 � �+m � �9��O� �iVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��N� �iVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��M� �iVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���L�'UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Y�� � �Z��S� �+VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��R� �QVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��Q� �iVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��P� �;VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 0 �� 0 �_��V�AVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��U� �VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���T�'VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 a B�� a �9��[� �iWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��Z� �;WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��Y� �iWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��X� �iWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��W� �iWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 / ���^�'WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��]� �+WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��\� �QWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 � �G � �"��a� �;XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_��`�AWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��_� �WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 Z BPq Z ���e�'XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��d� �+XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��c� �QXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��b� �iXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��h� �XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��g�AXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��f� �XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � >/� � �9��l� �iYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��k� �;YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� ��j�XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��i� �qXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 / ���o�'YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��n� �+YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��m� �QYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 q �G q �Q��r� �YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��q�AYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��p� �YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 >/q �m��v� �QZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��u� �iZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� ��t�YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��s� �qYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 e �r+��V��: � � e D�f � dc1cfb04b799c30dca02faae2f75f5cc94d83b63b11cf8e7acb33ed1b252117fD�e � 2b1a27963b4d2d2d4589a7d96e361c8f4359cb51ad10f5e108215c381d491ba3D�d � cb3ea59253d078a2c7a60ff6f6c3f55bf94679248c132be8e27c534245acd6c8D�c � 1ab3f90a7eed6a0e8f44c9833e1def98bdbceb194f37062e21cfb6fb030563e2D�b � 3b5a17995e4660d4c305944c4a13cd1bd8bdda18b9d69d13031b2b1044e1cd77D�a � aa3730bd40f0c5b60ded75b15d9a0b7f845a26219a0a739f877d6d2ac7161c6fD�` � 0c8fb84a63da81ffc9727d465f04ac197820bce6473ad8ca5f2d241c6cdfb9a7D�_ � 7de0016fd49560394d1c4f5584dd396e5b41989957702068ef31979934c299ddD�^ � f13d571f41792afa9d08465580b23f08ff7dd564e51f40e42a9b9f3a0ff77b62D�] � 1f0f6113c67eb17059e2588bc76ce4d1ce793113d638c89faf42684d92ac2c3eD�\ � 6d23e0e03a7a536fe3cae17f34dc45960c361e2ee84b11158681f3db86dbb0b3D�[ � f0c9b7b923d47df8b92aa0c427d4754da9c2d22e9eb87e436c06305406998a3cD�Z � 96d0ea79b3da11f9b3d85598dae3187e501c54728cd8509492569f9dc2c1670f � ! � �P��y� �ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���x�'ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��w� �+ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��|� �qZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��{� �ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��z�AZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��~�ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��}�ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 Z BPq Z ����'[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�� � �Q[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �i[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��� �[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� �[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ���[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 ~ p ~ �m�� � �Q\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� ���[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � ! � �P�� � �\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��� �'\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� � �+\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��� �q\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��� �\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�� �A\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ���\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ���\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 g O]~ g ����']Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,���[\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 q �G q �Q��� �]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� �]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ���]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,�� �[]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ���]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 0 �� 0 �_�� �A^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� � �^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��� �'^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 Y *hY � ��"�^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��!� �q^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� � �^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ v�� w�� x�� y�� z�� {��% |��) }��- ~��1 ��5 ���9 ���> ���B ���G ���K ���O ���S ���V ���[ ���^ ���a ���e ���h ���l ���o ���r ���v ���y ���| ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���" ���$ ���' ���* ���, ���. ���1 ���4 ���6 ���9 ���; ���> ���@ ���C ���E ���G ���I ���L ���M ���O ���Q ���S ���V ���W ���X ���Z ���] ���^ ���` ���b ���d ���g �h Á�j ā�m Ł�n Ɓ�o ǁ�q ȁ�t Ɂ�v ˁ�x ́�y ́�{ �~ ρ� Ё� с� ҁ� Ӂ� ԁ� Ձ� ց� ׁ� � ف� ځ� � p � �,��$�[^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��#�^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 7 ���'�'_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M��&� ^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��%�g^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 q �G q �Q��*� �_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��)�A_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��(� �_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��,�_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��+� �q_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��.�[_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��-�_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 7 � �_��1�A`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M��0� _Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��/�g_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 Y *hY � ��4�`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��3� �q`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��2� �`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��6�[`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��5�`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��9� �C`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��8� `Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��7�g`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 ) � ) �_��;�AaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n��:�_`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 Y *hY � ��>�aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��=� �qaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��<� �aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��@�[aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��?�aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��C� �CaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��B� aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��A�gaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q��E� �bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n��D�_aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 / >/ � ��G�bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��F� �qbAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��I�[bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��H�bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��L� �CbAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��K� bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��J�gbAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��M�_bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � d � �Q��O� �cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529���N�1bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 / >/ � ��Q�cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��P� �qcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��S�[cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��R�cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��V� �CcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��U� cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��T�gcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��W�_cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 d d ���X�1cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � p � �,��Z�[dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��Y�dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��]� �CdAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��\� dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��[�gdAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��^�_dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���`� �}dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���_�1dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 F ?F �t��b�kdAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��a� �odAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � p � �,��d�[eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��c�eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��g� �CeAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��f� eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��e�geAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��h�_eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���j� �}eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���i�1eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 t ?Ft �M��m� fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�t��l�keAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��k� �oeAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 �f��n� �CfAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191 � � �n��o�_fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���q� �}fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���p�1fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���tq�AfJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��s�kfAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��r� �ofAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���v�3fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��u�MfAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 e �r+��V��: � � e D�s � 8fab540ec8ac058e28cb3e62a08c210f00ce22695ad5a2b0412d48e0f77c285aD�r � 2ff94d80fcae8e5f2ae6416eb0e955f4149e7639722b5426b2b8f12150cc14bbD�q � 313a86e45fc4b42084c618c11f233c1ab6950f5af7ce19f962ea3fd1020736ebD�p � da4cd5b16857b9f434f773471d103d61dba9fbe99a3264cfce051444c342cf1bD�o � 009c4fd4d1a151a215ef1a31eb4f5b076e16ad5bd1c6bed249571dfdde69a686D�n � bd09647e7e930afde068aa13eae3a3f7166bcf0d4918c52f525b47c511c7b692D�m � 030b52a92f3fd60b2df1b1fee6a964377bc4d80776dbdfcfae051132e0c3815cD�l � 811548ea9fa1b1fd4ba32a27977ce75a08bd90e1f90d50bbdfaabe36480c3f46D�k � b7c575cffd422a15f77eaeb8f4a41cc6e965c486511f363df2d62887b7934eb0D�j � 66c5f4e48d6872789f81a04ef48fceb67a1705aadd369b0ccff804cb0eefeda9D�i � a18aeb73905ede9c9bd2f5ab9736372813b7662678482ea5ad4990ce21b77ae9D�h � 985cd3c30e1357c60af6a5b4425c5d16eca3e6970da5871aca65ecca4c468cd1D�g � 1a73f880c24703aeacd0795c62a4ddd8fe4db2ca199a961180176c9713e3fdf2 C .C �f��x� �CgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��w� gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 � � �n��y�_gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���{� �}gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���z�1gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���~q�AgJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��}�kgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��|� �ogAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ��� �3gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���MgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 \ d \ ���� �}hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���q�AhJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t���khAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �ohAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ����3hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���MhAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d�� � �?hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x�� � �ghAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��� hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 \ d \ ��� � �}iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��� �1iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���q�AiJiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t���kiAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� � �oiAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ����3iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���MiAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��� �?iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��� �giAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��� iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 9 � 9 ����3jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���MjAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^���?jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��� �gjAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��� jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��� �jThomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc ہO��� �jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 �eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2�� �gjAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D�� � �jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7�� � �ejAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr � 9 � 9 ��� �3kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%�� �MkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��#�?kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��"� �gkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��!� kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��%� �kThomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc �O��$� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 �eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��(�gkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��'� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��&� �ekAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr � � �&2 � ���,� �lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��+� �UlAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��*� �lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���)� �lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��0� �QlAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��/{�UlJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���.� �!lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���-� �!lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:��2�wlAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��1�ylAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � �&2 � ���6� �mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��5� �UmAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��4� �mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���3� �mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��:� �QmAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��9{�UmJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���8� �!mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���7� �!mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:��<�wmAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��;�ymAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 r /;� r ���A� �!nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���@� �!nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���?� �nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��>� �UnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��=� �nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 " T" �-��C� �QnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��B{�UnJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � � �:��E�wnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��D�ynAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 W Kz� � W ���J� �!oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���I� �oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��H� �UoAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��G� �oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665�0��F�cnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � f�� �-��M� �QoAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��L{�UoJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���K� �!oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665 � � � �:��O�woAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��N�yoAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 : K� � : �:��S� �kpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��R� �pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���Q{� pJiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690�0��P�coAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � Aa� � �:��W� �kpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��V� �+pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��U� �-pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��T� �kpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903 ` ��` ���Z�7pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��Y�YpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��X� �pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903 0 x� � 0 �:��^� �kqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��]� �kqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��\� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���[{� qJiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 q A� q � ��b� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��a� �kqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��`� �+qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��_� �-qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 � q� � �:��f� �krAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��e� �krAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081���d�7qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��c�YqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 B �+ B �d��i� �?rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��h� �YrAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���g� �+rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 4 A�� � 4 ���n�7rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��m�YrAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��l� �krAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��k� �krAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��j� �krAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081 c A�c ���q� �+sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��p� �ksAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��o� �ksAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Ja � �:��t� �ksAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��s� �?sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��r� �YsAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 g A�� � g ���y�tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���x�7sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��w�YsAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��v� �ksAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��u� �ksAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 e �r+��V��: � � e D� � 496ca22ef6b436dbee6813613f31f2ebe1718fbe7c53d90796a6f3f18ee0a331D� � 3fc86cf389acff5dfff9dfd65e25b9d96d358214bd2bd236061ed31d647ad9bbD�~ � fd17cae7a3075f2ad58ed62ad9a2bb016b9d0ecbda3ed31b464e395e00f4dcb9D�} � 5435c138b53b3d77c61b682fd1142b6ebad9946a7aafbb1f722f6f9a4896a265D�| � e1e1b8adc5317dafcd61f9374708c3ef7388ecd2591a47bb2dfdedc0eee9d389D�{ � 8b93611a7e50ab8b817c59d6ef504cf63f14b1ba210b4da69add3f3176898478D�z � f22ced6e5193aa0b22495fa95e9de588c04f9afa2d6070faf801306fc7e68363D�y � c2800a0089be75b093cde6c6c8289a71707f6b56b3e1e3655e237dd5229856efD�x � 7fa5ad9d67b6a38b005e9e2a1e8217c78399fa4a6135965a3d32ed6d2ab0889cD�w � 1282baff4a36da2985cd30f9ea8f45ff5c8aa9ed747e858cf20363a7b30022abD�v � 769a4e98dcdf66de7159dd3adbff251c61fcb448ebdacbcc474122895e9cf709D�u � 2ced5602fa70385602b80de9a0a4dd9347186ade416907e8bb7fd066af18f6e3D�t � 00dfecc575f562ca6c58f3290ca7fda9b19bbacf629d7c687dc4242984f8bb37 � ,m� � �r��}� �[tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��|� �ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��{� �ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��z� �tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � AR� � �:��� �ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�� � �ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��� �KtAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��~� �ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �]� � �:��� �kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��� �uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809����uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024����'tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 � AJ� � �j�� � �KuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��� �kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��� �[uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��� �kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � A�k � ��� �1vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735��� �'uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:�� � �kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�� � �kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 �6x � �"��� �;vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �ivAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��� �ivAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �ivAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���� �vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735 Z BPq Z ����'vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �QvAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �ivAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 dX� � �9��� �iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��� �iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���� �wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735����1wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 � Y�� � �Z�� � �+wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�� � �QwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� � �iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�� � �;wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 � �+m � �9��#� �ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��"� �ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��!� �ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��� �'wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Y�� � �Z��'� �+xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��&� �QxAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��%� �ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��$� �;xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 0 �� 0 �_��*�AxAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��)� �xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���(�'xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 a B�� a �9��/� �iyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��.� �;yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��-� �iyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��,� �iyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��+� �iyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 / ���2�'yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��1� �+yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��0� �QyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 � �G � �"��5� �;zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_��4�AyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��3� �yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 Z BPq Z ���9�'zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��8� �+zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��7� �QzAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��6� �izAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 bR GRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ߁� �# ၑ% 偑( 恑, 灑0 聑2 遑6 ꁑ: 끑< 쁑A 큑C E J �M �O �S �W �Z ���^ ���b ���f ���i ���n ���q ���t ���y ���} ��� �� �� �� �� �� �� �� ��# ��' ��* ��/ ��2 ��5 ��9 ��< ��@ ��C ��F ��J ��M ��P ��R ��V ��Y ��[ ��] ��` ��c ��e ��i ��l ��n !��p "��s #��v $��x %��{ '��~ (�� )�� *�� +�� ,�� -�� .�� /�� 0�� 1�� 2�� 3�� 4�� 5�� 6��! 7��# 8��% 9��' :��* ;��+ <��, =��. >��1 ?��2 @��4 A��6 B��8 C��; D��< E��> F��A q �G q �Q��<� �zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��;�AzAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��:� �zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � >/� � �9��@� �i{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��?� �;{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� ��>�zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��=� �qzAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 / ���C�'{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��B� �+{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��A� �Q{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 q �G q �Q��F� �{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��E�A{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��D� �{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 >/q �m��J� �Q|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��I� �i|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� ��H�{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��G� �q{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � ! � �P��M� �|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���L�'|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��K� �+|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��P� �q|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��O� �|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��N�A|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��R�|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��Q�|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 Z BPq Z ���V�'}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��U� �+}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��T� �Q}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��S� �i}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��Y� �}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��X�A}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��W� �}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��[�}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��Z� �q}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 ~ p ~ �m��]� �Q~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� ��\�}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � ! � �P��`� �~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���_�'~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��^� �+~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��c� �q~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��b� �~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��a�A~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��e�~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��d�~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 g O]~ g ���i�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��h� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��g� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,��f�[~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 q �G q �Q��l� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��k�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��j� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��n�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��m� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��p�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 0 �� 0 �_��s�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��r� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���q�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 Y *hY � ��v��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��u� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��t� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��x�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��w��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 7 ���{�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M��z� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��y�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 e �r+��V��: � � e D� � 832470ee4b64e39723111ada3304a733f57c404fb89c7383123a52f33bbde6d6D� � bd49c65cde81a93d80eed77c33ebfb093577ce199e9c182c9d77e73774072f37D� � 7b1c52bbe226abacf3c7479ca52c3d631af47e215754ccfb2ad53c6226e13392D� � 42867004de7a228cf85955e79762cca11cfedcace4742b7caa46109e8131839aD� � 76640b341c1b50d068385f178412bff6541f41c567500e0f8e16463cdeb30c40D� � 6e70e53e5187df893930a8cf3cec44c126d94196925b1a43fa27f481acdeb5bbD� � e14e58cd6c0a61d873c99c10de7e5a36ec844b84147e4656a784e33c1b0715b4D� � 81b502f5e282e58db43c00894f89f50523953165c64a408ef983aa2829145c7aD� � 30f27f7cbabd3d9bee929e1fa43a3ac2a916c5a427598ee5e816dd100518994dD� � ee0b6ee143ba37c13abc5858fef0725d5b30992afdcaff90babcd5af1ac812c8D� � 67c66396a0ecb57afd6c3a2f070e239f41c72943e3c3994c64e68c02a4cc1829D� � 4b31ab8ebd6b1481a2299adfff2b7d616abc0233760f8745ec256b96b86d0077D� � 7479424a5b57460d14eb031904fe5f6c5eacebff7fa6b708fb1b98b33a6b3900 q �G q �Q��~� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��}�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��|� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,���[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 7 � �_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 Y *hY � ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,�� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f�� � �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 ) � ) �_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 Y *hY � ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,���[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 / >/ � ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,�� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f�� � �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��!�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � d � �Q��#� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529���"�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 / >/ � ��%��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��$� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��'�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��&��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��*� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��)� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��(�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��+�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 d d ���,�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � p � �,��.�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��-��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��1� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��0� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��/�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��2�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���4� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���3�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 F ?F �t��6�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��5� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � p � �,��8�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��7��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��;� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��:� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��9�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��<�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���>� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���=�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 t ?Ft �M��A� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�t��@�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��?� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 �f��B� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191 � � �n��C�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���E� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���D�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���Hq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��G�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��F� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���J�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��I�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 C .C �f��L� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��K� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 � � �n��M�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���O� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���N�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���Rq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��Q�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��P� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���T�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��S�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 \ d \ ���V� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���U�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���Yq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��X�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��W� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���[�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��Z�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��^� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��]� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��\� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 \ d \ ���`� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���_�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���cq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��b�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��a� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���e�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��d�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��h� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��g� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��f� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 9 � 9 ���j�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��i�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��m�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��l� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��k� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��o� ��Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc \�O��n� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 ^eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��r�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��p� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr ] 9 � 9 ���t�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��s�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��v� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��u� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��y� ��Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc c�O��x� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 eeam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��|�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��{� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��z� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr d e �r+��V��: � � e D� � a706d40bf0fcf24324c24d5742ca54450b84792752d49ed7af95192bcd3e4527D� � 2f7c6c553d364083a3603f33a066c8031c3bc2f1e9c8bb2d64b355daf9a42c2bD� � 71e8109b89c2bfa0c40687b649c02bd70e7702214ec1fb76fe606db76ace6affD� � 0a35810bd924f95ae2af1ba31051f64c8683e42b953329a6af07ea00495f96a2D� � c7627b2a018e4b1db2b6131608528eae404bf3c43ab252995b1d5f7196ab97e1D� � 614205bf0041e0a5d32d64bd0743218a5ed52c6dcd8e5880076d87abff2016b2D� � bc495afc92d333d543576431a1cfc03dccc3bda5282057211d2065d0032129f1D� � f3ebae8493971694208c96d6d6286e660e797bed742700585d403ce9fd145072D� � 39bc056b01daeb577a1d13e5d56959179803eea2c53c39eeff982663bc189df1D� � 7afb4c27414189dd2a2cc1df1ce6c80ad77c0eb59aca381a22a3f4033f950c67D� � 1497a77c838103e684f02aef90dea21228feaeec08fb162ab52cb8db75cd682fD� � 97077fe95c5fd7927b97fea9e945e2065d9ef3dd5ca4eb757666fdc5b42ad749D� � 56b0e8da36b334813521cd572d937eb75a589047d4c9a956b630d239792bf4e6 � �&2 � ��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��~� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���}� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � �&2 � ��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� � �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�� {�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 r /;� r ���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 " T" �-��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � � �:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 W Kz� � W ��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� � �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665�0���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � f�� �-��!� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�� {�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665 � � � �:��#�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��"�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 : K� � : �:��'� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��&� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���%{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690�0��$�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � Aa� � �:��+� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��*� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��)� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��(� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903 ` ��` ���.�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��-�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��,� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903 0 x� � 0 �:��2� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��1� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��0� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���/{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 q A� q � ��6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��5� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��4� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��3� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 � q� � �:��:� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��9� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081���8�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��7�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ H��C I��E J��H K��J L��L M��M N��O O��R P��T Q��V R��Y S��[ T��^ U��` V��c W��e X��h Y��j Z��m [��o _��r `��t a��w b��y f��| h�� i�� j�� k�� l�� m�� n�� o�� p�� q�� r��! s��# t��' u��+ v��. w��2 x��6 y��: {��= |��B }��E ~��H ��M ���Q ���U ���Y ���] ���a ���f ���j ���o ���s ���w ���{ ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ���! ���$ ���& ���* ���- ���/ ���1 ���4 ���7 ���9 ���= ���@ ���B ���D ���G ���J ���L ���O ���R ���T ���V ���Y ���\ ���^ ���a ���c ���f ���h ���k B �+ B �d��=� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��<� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���;� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 4 A�� � 4 ���B�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��A�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��@� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��?� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��>� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081 c A�c ���E� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��D� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��C� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Ja � �:��H� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��G� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��F� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 g A�� � g ���M��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���L�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��K�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��J� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��I� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 � ,m� � �r��Q� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��P� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��O� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��N� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � AR� � �:��U� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��T� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��S� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��R� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �]� � �:��Y� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��X� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���W��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���V�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 � AJ� � �j��]� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��\� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��[� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��Z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � A�k � ���a�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735���`�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��_� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��^� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 �6x � �"��f� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��e� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��d� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��c� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���b� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735 Z BPq Z ���j�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��i� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��h� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��g� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 dX� � �9��o� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��n� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��m� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���l� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���k�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 � Y�� � �Z��s� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��r� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��q� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��p� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 � �+m � �9��w� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��v� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��u� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���t�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Y�� � �Z��{� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��z� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��y� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��x� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 0 �� 0 �_��~�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��}� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���|�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 e �r+��V��: � � e D�' � 6182e47b9746410469ab21c90f69c924a80ceff0a394abd6a25a441e8d6cc49eD�& � b554df264228a60d69e256e2f70f55d320abe544bb18085a944c35b983f83b21D�% � 214fc2bc53e4979642949a2ce8ea6bd43bff20e98fa27016ae4ad1be3c189b60D�$ � f154f7fbe4285c64fd5d8032253657798d0717ac258ce5a8ece9b6e798df388cD�# � d2490b1f0f83f60017971858b0aa1f5aba0285093f3b53cdaa0e5a1dd65b282bD�" � f82689a8168490ea030790e836a9ce025ac23d19836b5ef4eb2d441b7d99d8a0D�! � 11babb3c74159846537e70da4fb01e148e8741a334bdc4689a5eb16b24a1a181D� � 12efe5e7e0fc2ad175b1c36f053e1a4532e1f85d27fe3489623cb945a5908677D� � 5941cfa3708aa1d7eae457e8f0abc55a55d5a84eadb56473770f0a82215aa495D� � c204a4ffd212c3a27c0afea8e7c43b386fac6da8dfb78049b8fff2cea01ea128D� � 3d985b2d2ec13d506f3e32f82236c706a953bf9178605bd7e9c559e99fe33c06D� � d17c2ab42cfa6667afaac7434e92be20fd0330b7a2cf8ad897daec993049f5e9D� � a3cd127f94e232f4ccaddd486ee240986e25b65c51ab664b49ec511d5310482c a B�� a �9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 / ����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 � �G � �"�� � �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 Z BPq Z ��� �'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� � �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�� � �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � >/� � �9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 / ����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 q �G q �Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 >/q �m�� � �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � ! � �P��!� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��� �'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� � �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��$� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��#� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��"�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��&��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��%��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 Z BPq Z ���*�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��)� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��(� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��'� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��-� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��,�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��+� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��/��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��.� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 ~ p ~ �m��1� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� ��0��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � ! � �P��4� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���3�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��2� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��7� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��5�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��9��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��8��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 g O]~ g ���=�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��<� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��;� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,��:�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 q �G q �Q��@� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��?�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��>� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��B��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��A� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��D�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��C��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 0 �� 0 �_��G�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��F� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���E�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 Y *hY � ��J��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��I� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��H� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��L�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��K��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 7 ���O�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M��N� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��M�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 q �G q �Q��R� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��Q�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��P� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��T��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��S� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��V�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��U��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 7 � �_��Y�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M��X� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��W�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 Y *hY � ��\��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��[� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��Z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��^�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��]��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��a� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��`� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��_�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 ) � ) �_��c�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n��b�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 Y *hY � ��f��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��e� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��d� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��h�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��g��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��k� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��j� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��i�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q��m� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n��l�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 / >/ � ��o��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��n� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��q�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��p��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��t� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��s� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��r�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��u�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � d � �Q��w� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529���v�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 / >/ � ��y��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��x� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��{�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��z��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��~� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��|�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 d d ��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 e �r+��V��: � � e D�4 � 60639db656637bac71a8495c83b9cc351c89b200e836ed3343dfa6bca29e3956D�3 � 09c09056918a1d0fcf94103b7cc7f9728ea6f763a2c2d3db5a1a470846afc777D�2 � 43d76c869fe744e94bf344aa66f638f4afcac144a43ed4d8336d4147ae3bb81eD�1 � 29bd25debd6689e7eb9f2261280bdb1b0233f6d1bf8099f49d31d530c4432eb0D�0 � e55f9021fa118e217df9db527f05fb35638c68975d0977584ac974b8c6a6bddfD�/ � 903dd1548295c69291a624080d2c82e710a22a8ff376f018d6fd3a0f4d907c85D�. � 5f5b887dfc9f6ab8986542411f965a160cefec2bd50e34635046cb950eb7d93dD�- � 60f47d3d5a4d59ab230916a44b7ecff881116a21de176de5276bd96e52ac5c3eD�, � 61ce4b03660d33874c07cc8931ddbfe63af33129c020331fef0850ec847167e3D�+ � 13c47236e82fe68997766cf6d15ce0201350f4f534beee1f7e77dbee3e461cf0D�* � f5e02cd3cf204b648c7dd511674fd8b54070efe7521303ff43080cfcb8b074a3D�) � 6dce766bf15259d4d1a7aba1acd135a56d9bb61b6d653cef2da6590e890d9fd9D�( � ad1b644027e6c6f011f3ffcc714aa27825b548561a43f88debe325f3ed0dee5e � p � �,���[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 F ?F �t�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� � �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � p � �,�� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 t ?Ft �M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�t���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 �f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191 � � �n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ��� q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ��� �3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%�� �M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 C .C �f�� � �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 � � �n��!�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���#� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���"�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���&q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��%�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��$� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���(�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��'�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 \ d \ ���*� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���)�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���-q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��,�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��+� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���/�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��.�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��2� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��1� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��0� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 \ d \ ���4� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���3�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���7q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��6�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��5� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���9�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��8�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��<� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��;� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��:� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 9 � 9 ���>�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��=�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��A�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��@� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��?� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��C� ��Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc ށO��B� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 �eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��F�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��E� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��D� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr � 9 � 9 ���H�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��G�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���o ���q ���t ���u ���w ���y ���{ ���~ ��� ��� ��� ��� ��� � Á� ā� Ł� Ɓ� ǁ� ȁ� Ɂ� ʁ� ˁ� ́� ́� � ρ�! Ё�# с�& ҁ�( Ӂ�* ԁ�- Ձ�/ ց�2 ׁ�4 �7 ف�9 ځ�< ہ�> ܁�A ݁�C ၖF ⁖H 䁖K 偖M 遖P ꁖT 끖X 쁖Z 큖_ a c �g �k �o �r �v ���{ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��" ��% ��( ��* ��- ��0 ��2 ��4 ��7 ��: ��< ��? ��B ��D ��G ��I ��K ��M ��P ��Q ��R ��T ��W ��X ��Z ��] ��^ ��_ ��a ��d ��f � 69 � �^��K�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��J� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��I� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��M� ��Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc �O��L� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 �eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��P�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��O� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��N� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr � � �&2 � ���T� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��S� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��R� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���Q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��X� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��W{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���V� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���U� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:��Z�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��Y�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 r /;� r ���_� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���^� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���]� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��\� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��[� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 " T" �-��a� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��`{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � � �:��c�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��b�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 : K� � : �:��g� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��f� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���e{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690�0��d�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � Aa� � �:��k� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��j� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��i� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��h� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903 � ��` � �:��o� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081���n�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��m�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��l� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903 l A" l �1��r� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���q� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��p� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081 � X� � �:��v� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��u� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��t� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��s� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081 R q� R �:��{� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���y��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���x�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��w�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201 � AJ� � �j��� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��~� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��}� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��|� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � A�k � ����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 e �r+��V��: � � e D�A � 919e733f2ea0f03322ddd4ac6824dcb44dd6d5fcaabb66ccb9afee48b8b78718D�@ � 0b44e2a7472e36fcf462b7b85a5bbc147c95150b55e8d7e6dc3fe4977c7cdc76D�? � f707cfc509f1fd8d7d482b5937245f4dbfc078d16c4defb7fef772d41daac079D�> � c253a31b070bc89bcd355eeb3c549a299fb205b9c6badcc9d3e7254057f26ef3D�= � 6a35640d03a1109ec551440c9e15e05aac57712c85cd6644b826678181e23b5dD�< � b436b196f3c2735dddfe5727a948d1a2e443bdebffd7018905aa2558baba56d9D�; � 3daac146d8edbefdb34bcb729d74336de8f1afbaee929dc55464706da7615618D�: � 46a04b65f068cbfdca98fdfb989911df818cda7f362078f3f1fdede4d819cc71D�9 � 8b0d31d3b3732537ed9539107e868dbb4725488aa14e7a5070bee4b31e133318D�8 � 1724001fdb91ff6c4e1fcf64bccf981017dfd7ab649f21c1333810e6cbd8e9c6D�7 � 029a613293d1ba49b765f0f2ec6fc0b71f6fd43fb1ceff50f43e05dc84f98d20D�6 � bf1fe8afbf03b29de5f3eba68d356ac251478692658c6449b4cda08c73d4d4f8D�5 � 5a11f15beb55665259230a77f5624af4b896062e2a61b610d31d355500431f88 �6x � �"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735 Z BPq Z ��� �'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� � �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�� � �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 a B�� a �9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 / ����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 � �G � �"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 Z BPq Z ����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 >/q �m��"� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��!� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� � �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � ! � �P��%� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���$�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��#� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��(� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��'� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��&�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��*��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��)��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 / ���-�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��,� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��+� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 q �G q �Q��0� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��/�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��.� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��2��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��1� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��4�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��3��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 0 �� 0 �_��7�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���5�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 Y *hY � ��:��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��9� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��8� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��<�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��;��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 7 � �_��?�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M��>� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��=�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 Y *hY � ��B��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��A� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��@� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��D�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��C��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��G� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��F� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��E�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q��I� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n��H�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 / >/ � ��K��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��J� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��M�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��L��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��P� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��O� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��N�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��Q�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 d d ���R�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � p � �,��T�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��S��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��W� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��V� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��U�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��X�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���Z� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���Y�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 t ?Ft �M��]� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�t��\�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��[� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 �f��^� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191 � � �n��_�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���a� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���`�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���dq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��c�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��b� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���f�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��e�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 \ d \ ���h� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���g�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���kq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��j�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��i� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���m�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��l�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��p� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��o� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��n� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 9 � 9 ���r�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��q�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��u�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��t� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��s� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��w� ��Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc &�O��v� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 (eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��z�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��y� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��x� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr ' � �&2 � ���~� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��}� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��|� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���{� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 e �r+��V��: � � e D�N � c62386a6973d93798bd5a17ee72907932c0796c21589648ab5f313805f6ae46cD�M � fa80c361dec771feb54951286af7bb8032aef89cd8ded021b942b091ad431e5dD�L � 5c0a4fb7b658b9dca77b858ff98bd534bbc056c94aa438b11b253b1da80720a4D�K � a3461547f0108720d6413695a5d1110d735d6a9359910eca40e788f625bab184D�J � 5b66719aa307b84457c7ac3edc58f4b71cc65248e0ef006e5fee0c3e52896b5fD�I � 707c34f7fa9d4787f56722da43ebdb1458d9855c217691d5688c6bde0306a2b7D�H � 575e728d855d72fba88b860be7518db2c8fa0dc1add9046074dd5d320e1156bbD�G � be582ab129bf0e7739face571fb544ef2d038667883f4d15867fa2c2c302f748D�F � c72c2effb396db8fd12fe1bf50dc5ae0543a4d684cc6990bc2a8f8c1c707bd2aD�E � 9deefb8ac4e6a1d43c4894b9e5daf58d70b43a9f12952164dc89a1d15e5a400cD�D � 0380151eff2395148f47a991620ec2bd74e74d330969f2c6d6c0a064a0278166D�C � 895038cbd6764ef3eb9ee3cd61f7aeb95255a9dab0f3a8da8ecf81d235a2abc1D�B � 3f73609586cbfb03e673487d50c8317cc03657e173b51bd38b9491c79062a838 r /;� r ��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 " T" �-�� � �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�� {�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � � �:�� �w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�� �y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 : K� � : �:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690�0���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � Aa� � �:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903 � ��` � �:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k���Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903 l A" l �1�� � �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081 � X� � �:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:�� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�� � �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081 R q� R �:��%� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��$� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���#��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���"�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��!�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201 � AJ� � �j��)� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��(� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��'� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��&� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � A�k � ���-�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735���,�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��+� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��*� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 �6x � �"��2� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��1� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��0� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��/� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���.� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735 Z BPq Z ���6�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��5� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��4� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��3� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 a B�� a �9��;� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��:� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��9� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��8� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��7� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 / ���>�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��=� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��<� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 � �G � �"��A� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_��@�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��?� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 Z BPq Z ���E�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��D� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��C� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��B� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��H� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��G�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��F� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 >/q �m��L� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��K� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� ��J��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��I� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � ! � �P��O� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���N�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��M� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��R� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��Q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��P�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��T��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��S��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 / ���W�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��V� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��U� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 q �G q �Q��Z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��Y�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��X� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��\��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��[� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��^�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��]��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 0 �� 0 �_��a�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��`� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���_�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 Y *hY � ��d��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��c� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��b� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��f�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��e��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 7 � �_��i�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M��h� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��g�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 Y *hY � ��l��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��k� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��j� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��n�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��m��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��q� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��p� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��o�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��k !��m "��p #��r $��u %��w )��z *��~ +�� ,�� .�� /�� 0�� 1�� 2�� 3�� 4�� 5�� 6��% 7��) 8��- 9��2 :��6 ;��; <��> =��A >��E ?��H @��L A��O B��R C��T D��W E��Z F��\ G��^ H��a I��d J��f K��i L��l M��n N��q P��s Q��u R��w S��z T��{ U��| V��~ W�� X�� Y�� Z�� \�� ]�� ^�� _�� `�� a�� b�� c�� d�� e�� f�� g��! k��$ l��( m��, n��. o��2 p��6 q��8 r��= s��? t��A u��F v��I w��K x��O y��S z��V {��Z |��^ }��b ~��e ��j ���m ���p ���u ���y ���} ��� ��� ��� ��� ��� ��� � � � �Q��s� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n��r�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 / >/ � ��u��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��t� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��w�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��v��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��z� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��y� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��x�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 d d ���|�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � p � �,��~�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 t ?Ft �M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�t���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 e �r+��V��: � � e D�[ � dfbc0cbaf5fb588c23fcfdacafa9024ed6efd13bfbb1cf69316269cbaee79463D�Z � dfa6a2ee9076eba358c12de54d5d936a15a282109538f6772bdb75582afd0584D�Y � 1112275758e024da6aed300ab9d35464cd221ed62c67a573bd71242d60a699bfD�X � 109d66ff27fd10890453e0e8e39139cafcd73f6341aac559e6f00b019b08a12fD�W � 1b30b4a38b3fef0e81dd1879d3e9b159f739eadedc3e869eb5947a4bd3b25968D�V � fae889b06ab0ce312053475d9327bbc3ab774b5205f23a802574f40fb6dd1621D�U � 05a1a1334799c302fd4621a4dab067e901b9fbea4d7d269ebc6e9bea8d855923D�T � 0f67dd341c128a15768806e3944c813d90260a364561887b61378a18ff049547D�S � 0a551f7e2a238413dc99c1846c2fa6ce5424327eb7cae6cffdcc8530fe613c92D�R � 7a192ba7047354c7646edd4e2c5e44dc140a332186434319479f733ea0d3a469D�Q � f1014b0e635f3231b9775aea6acf589330dd8192d714a231b5392dff24ffc861D�P � fa816cfd764e59f3d6af36d6fe658eaf2ad7d0af0472a9bef2ab112995965b1fD�O � 5d35f8e8e692daf8ad4f89ccba227841148704f4f1a52d100f8d5555f6e2c562 �f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191 � � �n�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ��� � �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� � �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 \ d \ ���� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ����3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 9 � 9 ��� �3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%���M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^�� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x�� � �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E�� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��!� ��Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc h�O�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 jeam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��$�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��#� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��"� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr i � �&2 � ���(� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��'� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��&� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���%� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��,� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��+{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���*� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���)� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:��.�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��-�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � �&2 � ���2� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��1� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��0� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���/� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � f� � �-��6� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��5{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���4� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���3� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:��8�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��7�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 r /;� r ���=� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���<� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���;� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��:� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��9� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 " T" �-��?� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��>{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � � �:��A�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��@�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 W Kz� � W ���F� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���E� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��D� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��C� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665�0��B�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � f�� �-��I� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��H{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���G� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665 � � � �:��K�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��J�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 : K� � : �:��O� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��N� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���M{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690�0��L�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � Aa� � �:��S� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��R� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��Q� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��P� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903 ` ��` ���V�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��U�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��T� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903 0 x� � 0 �:��Z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��Y� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��X� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���W{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 q A� q � ��^� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��]� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��\� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��[� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 � q� � �:��b� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��a� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081���`�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��_�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 B �+ B �d��e� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��d� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���c� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 4 A�� � 4 ���j�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��i�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��h� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��g� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��f� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081 c A�c ���m� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��l� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��k� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Ja � �:��p� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��o� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��n� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 g A�� � g ���u��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���t�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��s�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��r� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��q� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 � ,m� � �r��y� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��x� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��w� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��v� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � AR� � �:��}� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��|� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��{� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �]� � �:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809�����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���~�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 � AJ� � �j��� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � A�k � ��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 e �r+��V��: � � e D�h � 8468dd2d01e7228ce1d031241b5387d85911912180e2b91324d509c7631724aeD�g � e2c654e3afba7eae27baf8ba94d32ce0d7b64ee9e4d712f07c55fe5511ac0e78D�f � 906005c50af3c97fba3c5a02b14b7ce32f662a5eafb00675e8750675b8323966D�e � ecf0213aa5f1df68903633d6e37f83ba74657dcdfef00998680e1d13d4107e9bD�d � d8cc4f7ba48ecdc9de7b819650b043bff67e2a0f66f0100cff7b2021dfdb7019D�c � cd7ecade58c83774da56075ecbc93181d0299693efa4a31b09f39a234ea8c0d8D�b � 42a032cda37e42e63ccb183ecdaa7710140521828aa8549a8f19dd0bc7fbea36D�a � 88bc32f0b32b7bb8891d9dd012f0481bd2103ca60cadb3ebc387b8645c331524D�` � c2c9b259e70aede7a57ebe7fa8a93a475866d4cce68f6b903edb0875c829bc6cD�_ � fe81316791b5a33fb6e458bc981914e5a5c7d16da0e818f6b455b94fd257fbd8D�^ � eb68e76343740b950f6fb531ed5af6afc884e16c3ca61bdb35b1d2115d73f0c4D�] � eb2e226e824b06855d4cf867531fb5f3409412d883d6e56543603660748ecfbbD�\ � 7f67e4364ed1e323c02f8bdeafb086bb8d6633c2da0a3139a1a54be82a87bdec �6x � �"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735 Z BPq Z ����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 dX� � �9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 � Y�� � �Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 � �+m � �9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��� �'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Y�� � �Z��#� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��"� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��!� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�� � �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 0 �� 0 �_��&�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��%� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���$�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 a B�� a �9��+� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��*� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��)� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��(� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��'� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 / ���.�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��-� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��,� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 � �G � �"��1� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_��0�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��/� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 Z BPq Z ���5�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��4� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��3� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��2� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��8� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��7�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � >/� � �9��<� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��;� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� ��:��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��9� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 / ���?�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��>� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��=� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 q �G q �Q��B� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��A�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��@� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 >/q �m��F� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��E� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� ��D��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��C� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � ! � �P��I� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���H�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��G� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��L� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��K� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��J�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��N��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��M��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 Z BPq Z ���R�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��Q� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��P� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��O� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��U� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��T�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��S� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��W��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��V� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 ~ p ~ �m��Y� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� ��X��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � ! � �P��\� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���[�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��Z� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��_� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��^� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��]�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��a��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��`��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 g O]~ g ���e�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��d� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��c� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,��b�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 q �G q �Q��h� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��g�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��f� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��j��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��i� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��l�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��k��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 0 �� 0 �_��o�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��n� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���m�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 Y *hY � ��r��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��q� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��p� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��t�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��s��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 7 ���w�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M��v� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��u�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 q �G q �Q��z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��y�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��x� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��|��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��{� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��~�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 7 � �_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M�� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 Y *hY � ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,���[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f�� � �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 ) � ) �_�� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 e �r+��V��: � � e D�u � dda309e14f66aa1f8ced19d835b7e6ff04827b05e42baed38cfbde2ea01b3351D�t � d6029c8033366f8fa025ecb16d28c0d7ebe9ff2aa2c4b0f27fd5af20a22fc2d0D�s � 52d1677bb4b0b6cf9d2e5dcd4c9cb2e58dee114d048654302dd20d27a8d31eceD�r � f926be88eca8a48d3a20210809bb3b3034814e0660e27737f39f9db9589b332dD�q � 1a8bb6d0d5d3a9bbd2452e189a4bddbc5fb7dd910ae645de886896daf57d324bD�p � 9984ba09f2a5bb2165cfe6589c4861a4ae3214b1932e9978e0648e075937b182D�o � ab64f5672ee9bcce92e16118c4c13b43b53597bb1ec2a50445c04cb3b9eeef74D�n � a9b3782c3c170d426ed6352d73a207121cb78d86ee04aff09e0065659d0cddb7D�m � ac4d6d11bf69e5b905738e3547274f544c6780aad810056708d4cdb6ef2f2842D�l � b1e27eaa8378961d1d5aa1cfe6e8b864169425ac61e6881ca154a93ccff6d67aD�k � 8a6cef14e08d6e8b37d66e40c1ac1a7bedf36720f015c5cf16ef968d5bd61eb9D�j � 7315923a129e703d18cf9c04318c3fce2223c31b6b9d9f8742322e1c2bfd100dD�i � 8e64b7d56dda27658b854cd7ae4711c43c6b16b97ee01075b4c86e7bea44f202 Y *hY � ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� � �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,���[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 / >/ � ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��� ���# ���& ���+ ���. ���1 ���5 ���8 ���< ���? ���B ���F ���I ���L ���N ���R ���U ���W ���Y ���\ ���_ ���a ���e ���h ���j ���l ���o ���r ���t ���w ���z ���| ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���! ���# ���& ���' �( Á�* ā�- Ł�. Ɓ�0 ǁ�2 ȁ�4 Ɂ�7 ʁ�8 ˁ�: ́�= ́�> �? ρ�A Ё�D с�F ҁ�H Ӂ�I ԁ�K Ձ�N ց�P ׁ�R �U ف�W ځ�Z ہ�\ ܁�_ ݁�a ށ�d ߁�f �i ၛk 偛n 恛p 灛s 聛u 쁛x 큛y { � � � � � ��� ��� � p � �,���[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f�� � �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�� �_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � d � �Q�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 / >/ � ��!��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� � �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��#�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��"��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��&� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��%� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��$�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��'�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 d d ���(�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � p � �,��*�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��)��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��-� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��,� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��+�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��.�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���0� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���/�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 F ?F �t��2�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��1� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � p � �,��4�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��3��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��7� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��6� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��5�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��8�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���:� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���9�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 t ?Ft �M��=� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�t��<�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��;� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 �f��>� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191 � � �n��?�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���A� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���@�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���Dq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��C�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��B� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���F�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��E�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 C .C �f��H� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��G� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 � � �n��I�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���K� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���J�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���Nq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��M�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��L� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���P�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��O�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 \ d \ ���R� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���Q�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���Uq�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��T�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��S� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���W�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��V�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��Z� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��Y� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��X� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 \ d \ ���\� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���[�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 ) ?F) ���_q�A�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1e%<�- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319�t��^�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u382-b05 (GA) - Update release notes for shenandoah-8u382-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��]� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 9 � 9 ���a�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��`�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �d��d� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.eae��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��c� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��b� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 9 � 9 ���f�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��e�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��i�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��h� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��g� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��k� ��Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc �O��j� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 �eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��n�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��m� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��l� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr � 9 � 9 ���p�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2e-%�- Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577�%��o�M�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1e%<�- Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 � 69 � �^��s�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-1e��@- Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-17914 - Resolves: RHEL-20965�x��r� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.eae�L@- Update to shenandoah-jdk8u402-b01 (EA) - Update release notes for shenandoah-8u402-b01. - Switch to EA mode. - Sync NEWS with vanilla branch version. - Related: RHEL-17914�E��q� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19630 K , K �T��u� ��Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Invoke xz in multi-threaded mode - generate_source_tarball.sh: Add WITH_TEMP environment variable - generate_source_tarball.sh: Multithread xz on all available cores - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable - generate_source_tarball.sh: Update comment about tarball naming - generate_source_tarball.sh: Reformat comment header - generate_source_tarball.sh: Reformat and update help output - generate_source_tarball.sh: Do a shallow clone, for speed - generate_source_tarball.sh: Eliminate some removal prompting - generate_source_tarball.sh: Make tarball reproducible - generate_source_tarball.sh: Prefix temporary direc �O��t� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�!@- Update to shenandoah-jdk8u412-b01 (EA) - Update release notes for shenandoah-8u412-b01. - Switch to EA mode. - Related: RHEL-30926 tory with temp- - generate_source_tarball.sh: Remove temporary directory exit conditions - generate_source_tarball.sh: Set compile-command in Emacs - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166) - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004) - Use backward-compatible patch syntax - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST - generate_source_tarball.sh: Remove trailing period in echo - generate_source_tarball.sh: Use long-style argument to grep - generate_source_tarball.sh: Add license - generate_source_tarball.sh: Add indentation instructions for Emacs - Remove -T0 argument from systemtap tar invocation - Related: RHEL-30926 �eam tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork - generate_source_tarball.sh: Adapt version logic to work with 8u - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086) - generate_source_tarball.sh: Update examples in header for clarity - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP - generate_source_tarball.sh: Only add --depth=1 on non-local repositories - Move maintenance scripts to a scripts subdirectory - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository - jconsole.desktop.in: Restored by running icedtea_sync.sh - policytool.desktop.in: Likewise. - Restore IcedTea sources correctly in spec file - discover_trees.sh: Set compile-command and indentation instruction s for Emacs - discover_trees.sh: shellcheck: Do not use -o (SC2166) - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - discover_trees.sh: shellcheck: Double-quote variable references (SC2086) - generate_source_tarball.sh: Add authorship - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086) - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: Set compile-command and indentation instructions for Emacs - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086) - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268) - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196) - generate_source_tarball.sh: Handle an existing checkout - generate_source_tarball.sh: Sync indentation with java-21-openjdk version - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS - Related: RHEL-30926 � 8� � �2��x�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1f�@- Update to shenandoah-jdk8u412-b08 (GA) - Update release notes for shenandoah-8u412-b08. - Complete release note for Certainly roots - Switch to GA mode. - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Related: RHEL-30926�D��w� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.eaf�- Update to shenandoah-jdk8u412-b07 (EA) - Update release notes for shenandoah-8u412-b07. - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - Resolves: RHEL-30926�7��v� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.eae�r�- Turn off xz multi-threading on i686 as it fails with an out of memory error - Normalise whitespace - Move to upstr � g g ���yw�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��{��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��z��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��~��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��}��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��|��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���w�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ����;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I�� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 e �r+��V��: � � e D� � 43ba47c5fe93e659e2128f88d812fbff89a0212d3f97b085a69f6ec65e2a1b2aD� � 9b6758993720f8e305448717bc270151ffeedba84a7961f0c5e110065eb6f188D� � 17ed16fa6fa0dce15c8b3485e9d01613b70ef05e54ce42b4ead591c57c7f47aaD� � d2619ceca8fca7e9ee19cea2143fbd219429e9f9b06409934c366c8d6fb4cefbD�~ � 447af92c743509fb44207fbeccdb5f8b9f35865517ad94009935976e7e5339edD�} � 07b97f3f2c7b61f7d3f1361ef0cb40ea95320f3213ff8441345dd39ed092edffD�| � 176be26252edd9349f87c81796fa0c0c19ed3e8dbd43a82b201b7ebab75624edD�{ � f8d118dd0c38e6be586da71c24bb8639d30d388d9b57e276ec52b9ac2f649eadD�z � a2e3eec180d90a42cea830a8b5f0fa6890394a9b51d4349667c8010da5d2d418D�y � 88ac66f78b2cf64dc6ea2d02f58193bd752cb598be4fa33a9328f2bf4d42de00D�x � aba0487fc98846f969d23ad65f98b2fddc20c5a9ecbd166216fb523452d2cb47D�w � 0768c02eab146e2f88cb0c3f41aee2d4f7b14dbdde274b3955f2155eb21cf944D�v � 322851c3e3042c4bb07d4bb68b94af8a35852bcac51ee3546cab4f53bc08392b f f � ����;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p�� ��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�����Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ����;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ��� {�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I�� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ��$��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#��#��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���"���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���!�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��){�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��(��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��'��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��&��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��%��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#��-��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���,���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���+�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���*{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#��2��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��1��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��0��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��/��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ��.��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��7{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��6��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��5��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���4{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��3{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��;��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��:��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��9��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���8{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��?��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��>{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��=��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��<��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��C��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���B{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��A{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��@��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��G��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��F��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��E��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��D��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��Km�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��J{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��I��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��H{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��O��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���N{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���M{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��L{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��S��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��R{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��Q{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��P��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���W{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��V{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��Um�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��T{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��[{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��Z��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��Y��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���X{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���_{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���^{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��]{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��\{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��c{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��b{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��a��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��`��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��g{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��f{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��e��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��dw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��k��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��j��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���i{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���h{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��o��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��nw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��m{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��l{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���r{�; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���q{�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��p{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��v{�G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��u{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��t��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��s��) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��z{�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��y{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��x��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��ww� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��~��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��}��)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���|{�;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{{�7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��w� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��w� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��{�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � �� {�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+�� {�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#�� ��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 e �r+��V��: � � e D� � 34157ccac81b1fd2400592605aa6918ce36609a1d9a3b2cf1b602234d548488dD� � e912503786155640b2280491e5de73ce270fcfcaf9fc882663359bec6597f790D� � 385d88da6f3dbafec168b9405c82b40252b4f9d9df0ef1b7328108f1b7de4898D� � e813e31fc27015fa715af1d13ab9191ba9af31d93085ac2e76e58359305bc66aD� � 5c04fbcd46e3e025d84e9e8ddf45f002a83926d8117b74d5e0012aa43c934978D� � d965d09a6d6db58488fc06f0a1f491c8769c8295f4e6dfaec5bf9e496cc72debD� � efe004dfc7fcd0160427a7f637f2cab140b7a315eee7143e1894e834e4a70487D� � c76cdef35908893f12eaa11205c3140dbd9f989ea6e01fd9bc00741c05bdb4c5D� � a6859e4664d6b26565182fc6c6f79171ac40e3aabb90299e00efc46e4acf5bc3D� � 8ef9940c8eab06db4d162a8e62feb96b91bf5674ca74e3d18247cbacdb1fedd1D� � e63709673c8670886d3e9e2205785adba63f0186853bcf74298fcce168c18f0dD� � 839aadc2fbe0a7a4b708e39eb1e3e9359bbbad64641fd674e425f561de5d004aD� � 0f0fa59eb6e08ac74519d59b709ce746a54f5ac7294b9ef563943eea5bdc327d [� �{��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��w� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��{�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��{�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ��� {�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+�� {�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#�� ��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��"{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��!m�]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��%{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��${�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��#��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���*{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��){�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��({�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��'��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��&��'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��,{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��+m�]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#��0��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��/��'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��.{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��-{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��4m�]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���3{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��2{�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��1{�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��5{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��9��'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��8{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��7{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���6{�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��>m�]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���={�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��<{�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��;{�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��:��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 bR dRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��� ��� ��� ���$ ���) ���- ���2 ��7 ��; ��? ��C ��G ��K ��O ��S ��W ��[ ��_ ��c ��g ��k ��o ��r ��v ��z ��~ �� �� �� �� �� �� �� �� ��" ��% ��* ��, ��0 !��4 "��5 #��9 $��> &��? '��B (��C )��G *��K +��M ,��Q -��T .��X /��[ 0��^ 1��b 2��e 3��h 4��l 5��n 6��q 7��t 8��w 9��z :��} ;�� <�� =�� >�� ?�� @�� A�� B�� D�� E�� F�� H�� I�� J��" K��% M��( N��+ P��. Q��0 R��3 S��7 U��9 V��< X��@ Y��C Z��F \��J ]��N ^��T _��Y `��^ a��c b��g c��l � � �;��?{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��Bm�]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���A{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���@{�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��C{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��G��cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��F��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��E�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���D{�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���K{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��J{�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��I{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��H��9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��M{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��Lm�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��Q��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��P��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��O�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���N{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��T{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��S{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��R��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��X��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��W��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��V�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���U{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��[{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��Z{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��Y��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��^}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��]��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��\��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��b��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��a��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��`�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���_{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��e{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��d{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��c��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��h}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��g��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��f��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��l{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��k��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��j��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��i��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��n��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��m{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���q}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��p}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��o��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��t��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��s��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��r{�E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��w{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��v{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��u��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��z}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��y��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��x��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��}{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��|{�E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���{}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&����GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��~{�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&�� ��GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��{�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_�� {�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT � �q����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 e �r+��V��: � � e D� � 47f52ae65081a918aa822fb28261dafe5b707b012d7f07714f3beff7a4d49f45D� � d7d58e3708a957c3e2d7c60c347de4ffa8baf7169446426889d9fd0618af02c9D� � 637c8c01ec07ac21fcb709f52f870af6526eaa83bd2915683f8a6f983072e500D� � da13c76a95a624d2a68550bf3fcf6a40650e79fef0cb040d51e46aa293093fb8D� � 580eedc42430dabee13298aaafa5f6d0828a7c8ee03e48cc34e248044b273c98D� � 2f0d2a97bc011f105608fc115346133185d5789361484a950ec00bcc5e36bc70D� � 1e8d63f3eb80cd678a21631ab2ebcb9b62ce51bba0f293bfe51b327fad1145e2D� � 102055158159425115e1f789e5fc2320b09a7a6f4b5b764de3614f437bfa3e71D� � f878ae8eff1fab58c570c743d050866a386253258cd06a481221516b31ab7bc9D� � 134406c95bb0e98bfe18a35cc06ff8a3deca7248e9196efcee6eb05a7a0dcd55D� � ff8272f92c772a5d757bacb85570f4468e0c2c40956746d49494f1daa5041086D� � 98d431e1523dbb3f7b2df74717a2e41dc1d70f15e80c7fdb07bb88cc13a58c4dD� � 47479ca82c3c2c2c7d65a383dba4f54f39f315bfe0571d1d9129c0d4101abdd8 �r �_��{�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 ! �%! ���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.����WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��{�_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd G���m�AJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��{�UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � �� � ��� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.�� ��WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_�� {�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��"{�UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���!{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#�� ��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �u �_��%{�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182�,��${�_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd L���#m�AJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ! �%! ���({�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��'��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.��&��WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��+{�_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd O���*m�AJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��){�UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ? 8=? �y��.{�yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��-��gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��,{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 i � i �.��0��WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��/{�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��3{�UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���2{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��1��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � �u� � �v��7��gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��6{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642�,��5{�_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd T���4m�AJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � � ���9{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�y��8{�yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966 I � � I �,��<{�_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd W���;m�AJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��:{�UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��@}�=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��?{�yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��>��gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��={� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 � }� � ���C{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�&��Bs�[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��As� Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 I � � I �,��F{�_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd [���Em�AJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��D{�UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��J}�=Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��I{�yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��H��gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��G{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 n }� � n � ��N�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��M�#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665�&��Ls�[Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��Ks� Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 s ��O� � s ��T�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ss�5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��R�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��QyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��P�cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665z��OyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665 / �< � / z��YyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��X�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��W�#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���Vw�?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Uw�!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��^�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��]s�5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��\�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��[yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��Z�cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��cs�5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��b�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��ayAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���`w�?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��_w�!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��gw� Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���fw�?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��ew�!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��d�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��l�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��kyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��jw�WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��iw�ESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��hi�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��qw� Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���pw�?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��ow�!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��n�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��ms�5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��tw�WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��sw�ESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��ri�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���uw�3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��w��;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��v��QAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��{��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��z��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��y��yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��x��7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��~{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��}�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��|��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���w�3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ����;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p�� ��QAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K����Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � �� ��; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p�� ��Q Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?�� ��y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� �� ��7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���{�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K���� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 e �r+��V��: � � e D�) � 70b5a86232c1ba2b2535285ea1e7951e1c2ce4779402d9ef8b14a9e2574922c4D�( � 386d6eeb6ec186c7d3ac868781a062f7659e7f29629bf7919767ced443ced16eD�' � 6afa89d1f93f0c18b712d80864bb7c05453680e7c2ef4267277d1a05fc5f3ed5D�& � 91265a7a7ea601e581e1e9d0927369baa2509184619fcbfe483ba909db979caaD�% � 7b73f05a3cad8a9e27146ed66584c90db157d3c8dd9073156714b06d53ae16b4D�$ � 569c3afb20ee7aa02a316df5870c65b53bb314376059e9e761ab3e81622b3891D�# � 245bfc9c157989c74777ef47e429b5b2823da6b25f940cc71fd0fae7aa230185D�" � 5effb3b9f9c3b2e58564ce52ef1e7d855cc8030a6d8903d0d257eb9a2f166a73D�! � 708f19a2413ea0ae0ab9a7619a05c06675c69004d477b56b71ac6ec988ee1cc4D� � c1a1ba3ae8f745008a0b7e5c0e4663241db1a386d16bd54eef846e125686cebaD� � 02f897ee795a6592d97ca15c780cbdd6ca2bc2a793d53ef279ad3f01f27d472cD� � f72a7e95336d9380f37c46d2de0b736c876a15b4c1e7dbb4c351ca2552bbc411D� � 6eb48672224acb21d0dbc83835af74ba98ee85d8e9d3991623af2bc0d57d6761 f f � ����; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����Q Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ��� {�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K���� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � �� ��} Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082��� �� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527��� �� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��%{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��$��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��#��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��"��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��!��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#��)��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���(�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���'�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���&{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#��.��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��-��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��,��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��+��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ��*��} Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��3{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��2��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��1��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���0{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��/{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��7��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��6��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��5��1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���4{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��;��A!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��:{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��9��5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��8��7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��?��1!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���>{�5!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��={�}!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��<��A!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��C��5!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��B��7!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��A��A!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��@��A!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��Gm�S"Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��F{�}"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��E��5"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��D{�}!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��K��)"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���J{�;"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���I{�7"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��H{�O"Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��O��5#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��N{�G"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��M{�}"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��L��A"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���S{�7#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��R{�O#Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��Qm�S#Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��P{�}#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��W{�}#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��V��A#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��U��)#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���T{�;#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���[{�;$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���Z{�7$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��Y{�O$Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��X{�G#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��_{�G$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��^{�}$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��]��A$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��\��)$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��c{�O%Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��b{�}$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��a��]$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��`w� $Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��g��A%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��f��)%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���e{�;%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���d{�7%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��k��]%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��jw� %Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��i{�G%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��h{�}%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���n{�;&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���m{�7&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��l{�}%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��r{�G&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��q{�}&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��p��A&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��o��)&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��v{�A&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��u{�}&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��t��]&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��sw� &Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��z��A'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��y��)'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���x{�;'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���w{�7'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��~��]'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��}w� 'Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��|{�G'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{{�}'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��w� (Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��{�G(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� �� {�A'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��{�A(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����](Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ��� {�(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+�� {�](Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��{�})Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q�� ��])Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� )Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�G)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ e��t f��u g��w h��{ i��~ j�� k�� l�� m�� n�� o�� p�� r�� s�� t�� u�� v��% w��) x��. y��3 z��7 {��; |��? }��C ~��G ��K ���O ���S ���W ���[ ���_ ���c ���g ���k ���n ���r ���v ���z ���~ ��� ��� ��� ��� ��� ��� ��� ��� ���! ���& ���( ���, ���0 ���1 ���5 ���: ���; ���> ���? ���C ���G ���I ���M ���P ���T ���W ���Z ���^ ���a ���d ���h ���j ���m ���p ���s ���v ���y ���{ ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� � Á� ā�! Ɓ�$ ǁ�' Ɂ�* ʁ�, ˁ�/ ́�3 �5 , ^�� � , �+��{�])Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����')Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��{�A*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���{�)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 e �r+��V��: � � e D�6 � 5830fa7abe16fd9ef562c14318f17462eb9ebe4e2473b4b94827dab6efc8cb5bD�5 � 33f79495a144745f0bf779634202c2e16ec9ce1d545d08ada1d51ff124397d75D�4 � bbfa941de4ca08de5ac2912c49346b26f8b10f79c9dedcc1c73b7593d728b8d9D�3 � 5732a4798be4c87badb456e95d85a69fdcc47d79f536cdf10bf8bfe8ac5353abD�2 � f97f8b49e1c67b65e3bc3821a5542f91cff1d9241f858a36d041fae368a1f2fcD�1 � 08b94d6efe931c32344ea97bafacefaf26b7ab57c499ee718b7466ba31c94321D�0 � a5344af6f4e55dc3241835e173e61da3faccff81e74b16a504ca025d31166199D�/ � 82943aa98d57823fabd6521b0364b533551b4f5b299febc13bc41d5342b5583cD�. � 2d39e047ddef688bbc3b526d384126a7602bf927866cbbd6d9306cf24221253dD�- � 0781ec76d6ef76f218a16289f31a21e27af4064a2fa1f213a49828a67e50c669D�, � d434ab93e69642120974f37b28bf06b2fc55a8b51e2bb5b62b339413bcc1b605D�+ � 6bba16931590ee051b717e6cc7eaf6319e483746bab088b484dada27e5f230d5D�* � 4660a5a7faa79cea2990c384533fca3da9b3ac6afdf6f55b36b2cad51352c3e0 D %}~ � D ��� {�*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;�� {�}*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$�� m�]*Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��!{�A+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q�� ��]+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���&{�+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��%{�]+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��${�{+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��#��A+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��"��'+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��({�}+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��'m�]+Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#��,��A,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��+��',Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��*{�A,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��){�},Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��0m�],Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���/{�,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��.{�],Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��-{�{,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��1{�},Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��5��'-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��4{�A-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��3{�}-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���2{�5,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��:m�]-Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���9{�-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��8{�]-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��7{�{-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��6��A-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��;{�}-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��>m�].Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���={�.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���<{�5-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��?{�}.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��C��c.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��B��].Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��A�� .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���@{�5.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���G{�/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��F{�S.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��E{�.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��D��9.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��I{�}/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��Hm�]/Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��M��c/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��L��]/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��K�� /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���J{�5/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��P{�S/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��O{�/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��N��9/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��T��c0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��S��]0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��R�� 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���Q{�50Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��W{�S0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��V{�0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��U��90Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��Z}�0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��Y��]0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��X��G0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��^��c1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��]��]1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��\�� 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���[{�51Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��a{�S1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��`{�1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��_��91Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��d}�1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��c��]1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��b��G1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��h{�2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��g��92Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��f��c2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��e��]2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��j��G2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��i{�S2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���m}�2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��l}�2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��k��]2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��p��c3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��o��]3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��n{�E2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��s{�S3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��r{�3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��q��93Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��v}�3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��u��]3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��t��G3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��y{�4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��x{�E3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���w}�3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��{��G4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��z{�S4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���~}�4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}}�4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��|��]4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.�� ��W4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��{�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���{�4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&����G5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��{�S5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���}�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.�� ��W5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_�� {�E5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT � �q�� ��]6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192��� {�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#�� ��A5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �r �_��{�E6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���}�6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}�6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 ! �%! ���{�6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.����W6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��{�_6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����m�A6Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��{�U6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 e �r+��V��: � � e D�C � 6b0ef069c7763a3ba0b61d3804a6919fa06467de6088cbbcda7c568dfc3309b0D�B � 62730a490f70fb743015316019c09c1992ef54947750f054eaaf08ff9a387163D�A � e3e0d812a13816d47ae085d4f88c2d0f4d8affad6568434ab0f720442981017bD�@ � d81b0c0ebf60fb1b4d6ccb36f93b9d93064cf246ecff7f7c16b2ddbb61c57c91D�? � 0a5287477758b2371bd5090dfacaf9dd93c3f1cc379245204f8a143593599b48D�> � f24dce379d6c501f95ff094a43c786cc4932cecf9af4ed5ad162b4159d5a2007D�= � 645b31999a5a9633d017660dd3029d098a23145a02bcc776967acb3d0414464cD�< � e2febf7854a5223cbd8ac5101e3cb5cc8a2a9ac22a6ed7712ad25b139199fee2D�; � 107479062ac7d45131a7f63b41712cb8d8bbc15a68e65ae36bc4612536690957D�: � c6578be082e094285bfff45773f10ef576902f4e6d7f9f5a58b810e7e4d8ab9aD�9 � d64ee0696017c879c9cac304b66dad0523eafec9464a87a647d5b5c2a19e2466D�8 � db87f894acc24775904c7b50e997fa12818c4c6368e17139307fd37433372e1eD�7 � 5e128b028063e43ec93a59c4107b46344a43bc260f99578b7c4a2b788885cc7e � �� � ���}�7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}�7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����W7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'�� {�U7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229��� {�7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#�� ��A7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �u �_��!{�E8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182�,�� {�_7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ł�� m�A7Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ! �%! ���${�8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��#��A8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.��"��W8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��'{�_8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd Ȃ��&m�A8Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��%{�U8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ? 8=? �y��*{�y8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��)��g8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��({� 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 i � i �.��,��W9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��+{�E9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��/{�U9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���.{�9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��-��A9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � �u� � �v��3��g9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��2{� 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642�,��1{�_9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ͂��0m�A9Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � � ���5{�:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�y��4{�y9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966 I � � I �,��8{�_:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd Ђ��7m�A:Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��6{�U:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��<}�=:Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��;{�y:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��:��g:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��9{� :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 � }� � ���?{�;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�&��>s�[:Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��=s� :Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 I � � I �,��B{�_;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd Ԃ��Am�A;Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��@{�U;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��F}�=;Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��E{�y;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��D��g;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��C{� ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 n }� � n � ��J�<Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��I�#<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665�&��Hs�[;Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��Gs� ;Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 s ��O� � s ��P�<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Os�5<Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��N�{<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��My<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��L�c<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665z��Ky<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665 / �< � / z��Uy=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��T�=Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��S�#=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���Rw�?<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Qw�!<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��Z�=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ys�5=Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��X�{=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Wy=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��V�c=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��_s�5>Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��^�{>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��]y>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���\w�?=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��[w�!=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��cw� >Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���bw�?>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��aw�!>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��`�>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��h�{?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��gy?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��fw�W>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��ew�E>Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��di�>Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��mw� ?Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���lw�??Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��kw�!?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��j�?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��is�5?Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��pw�W?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��ow�E?Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��ni�?Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���qw�3@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��s��;@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��r��Q@Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��w��A@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��v��A@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��u��y@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��t��7@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��z{�}@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��y�� @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��x��@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���{w�3AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��}��;AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��|��QAAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����AAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#�� ��AAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����yAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��~��7AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��{�}AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ����;BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����QBAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#�� ��ABAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#�� ��ABAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����yBAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���{�1BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{�� {�}BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I�� �� BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ��BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ����;CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����QCAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����ACAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����ACAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����yCAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���{�1CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�}CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K����CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 e �r+��V��: � � e D�P � 3e729bea301dda80bd7dad924182af1a8859d3473da42b7cb9ed78adebef8963D�O � 1b9fbe198a3af7e79bb697022c8043d39441c77daf5446b0e0b8e7f5c18603c8D�N � 5a64f67b760664231aa056ce36899a472656f882e163cec3ee2c913fe4b34140D�M � b1355c30321cdcfe6f3fc6298e8e7995196ed2edc8127aa23cee6fb0def56d65D�L � 5dc4485c972bd78d1637297056bbcc819f90e800c1681f449d5ab226d2b8772bD�K � b620f989048c7f2f276ae3cbc4a5217f51cff7aad191e75030d927f8022e7c5aD�J � 8b57170fd0541d89c862ecea52f823ede947a5b16983a9646cf0c6e4970996b4D�I � fed7b567e393c86119acb36d69b38b769bcb51e24ddcf415141d81230fdc54a8D�H � f87df491c22e76385180845739c13ba05724afcded006f1e0f2114ff956460e9D�G � 5b9c35a49f05bdae1d6d9ae13688adb2f1aa9eed15604ea80e3126af3ad89c77D�F � 1a762e2d8882a0c051d0a322eb97ba3c2fbdb843e16699bb702cecd284f238faD�E � 905c6cb39018d44fe1113513cbf517b142fbc537206ae23c0ce00c299f5e39a4D�D � 7f18b428cb0449058380cba27d10eac85a6389b6c3393ef6454032f2dda04023 + ��9 + � �� ��}DJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#����ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082�����DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��!{�}DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#�� ��ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#�� ��ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#�� ��ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#�� ��ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#��%��AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���$��EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���#�� EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���"{�5DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#��*��AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��)��AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��(��AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��'��AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ��&��}EJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��/{�}FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��.��AFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��-��AFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���,{�5EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��+{�}EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��3��AFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��2��AFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��1��1FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���0{�5FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��7��AGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��6{�}FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��5��5FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��4��7FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��;��1GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���:{�5GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��9{�}GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��8��AGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��?��5GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��>��7GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��=��AGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��<��AGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��Cm�SHJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��B{�}HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��A��5HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��@{�}GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��G��)HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���F{�;HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���E{�7HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��D{�OHSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��K��5IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��J{�GHAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��I{�}HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��H��AHAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���O{�7IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��N{�OISeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��Mm�SIJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��L{�}IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��S{�}IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��R��AIAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��Q��)IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���P{�;IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���W{�;JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���V{�7JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��U{�OJSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��T{�GIAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��[{�GJAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��Z{�}JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��Y��AJAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��X��)JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 bR 7RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ с�< ҁ�? Ӂ�B Ձ�F ց�J ׁ�P �U ف�Z ځ�_ ہ�c ܁�h ݁�m ށ�p ߁�q �s ၡw z ち{ 䁡} 偢 恢 灢 聢 遢 ꁢ 끢 쁢 ! �% �* �/ �3 �7 ���; ���? ���C ���G ���K ���O ���S ���W ���[ ���_ ��c ��g ��j ��n ��r ��v ��z ��~ �� �� �� �� �� �� �� �� ��" ��$ ��( ��, ��- ��1 ��6 ��7 ��: ��; ��? ��C ��E ��I ��L ��P !��S "��V #��Z $��] %��` &��d '��f (��i )��l *��o +��r ,��u -��w .��z /��| 0�� 1�� 2�� 3�� 4�� 5�� 6�� 1� � �$��_{�OKSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��^{�}JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��]��]JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��\w� JJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��c��AKAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��b��)KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���a{�;KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���`{�7KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��g��]KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��fw� KJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��e{�GKAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��d{�}KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���j{�;LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���i{�7LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��h{�}KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��n{�GLAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��m{�}LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��l��ALAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��k��)LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��r{�ALAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��q{�}LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��p��]LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��ow� LJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��v��AMAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��u��)MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���t{�;MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���s{�7MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��z��]MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��yw� MJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��x{�GMAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��w{�}MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��~w� NJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��}{�GNAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��|{�AMAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{{�}MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��{�ANAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{�NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����ANAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{�� {�}OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q�� ��]OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��w� OJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��{�GOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��{�]OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#�� ��AOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��'OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� �� {�AOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��{�APAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���{�OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���{�PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����APAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�}PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�]PJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 e �r+��V��: � � e D�] � bd616a68bac2dba0c3050b8d3da7ce5d016fa05d03d2c3ca41e478309141d6d8D�\ � 026420613efcc87726ba91b165fc0b746ce24ff329555220967db5cc979a803aD�[ � 5dfcf8baeded2f96a2597b878a1006d7eb03d4d61927a000e1528dd9008b0671D�Z � d47daec1adb6903ec50993bb856136c6ca6c1d28610a211a0082c8b683162941D�Y � bce793675eea8330ee5714f685ee6bf75de56dd9f106dbbe3149d9fa9d144416D�X � acb345f09856db7783a06a30026e252117dbee4274e86ea5b3c2959410f22b01D�W � a71605698db58a372ff02ab6d78041cca4507c94f4bdc16507ec30994e53892fD�V � fdcabd5524523efc4fa2f438cdb2f40de42b6606b73bbff9e8f65e21ea81f437D�U � 0e30ee127b67a51aaff1ffe3ae0cb616b808bc21850fe2f23be2b229a8bb8853D�T � f81e7c1a0f24f7ca56cedc1938c0e1bba78c74ad082589529118fe1d795d6748D�S � 5f692d98607238270b572db3bdedd64d8b9eb468b0cc08cead1d6b23aae63718D�R � 7f5933636add693e7d9a57c9d29615c25c2163009b4d680b43a93c0f252fc3c4D�Q � d91a5237171093f889f2e37c55c5cbf4f02728ff2fb050c08f0547c1c7cf5f63 � �� � � �� {�AQAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���"{�QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��!{�]QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#�� ��AQAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��'QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��${�}QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��#m�]QJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#��(��ARAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��'��'RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��&{�ARAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��%{�}RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��,m�]RJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���+{�RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��*{�]RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��){�{RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��-{�}RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��1��'SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��0{�ASAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��/{�}SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���.{�5RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��6m�]SJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���5{�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��4{�]SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��3{�{SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��2��ASAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��7{�}SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��:m�]TJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���9{�TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���8{�5SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��;{�}TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��?��cTAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��>��]TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��=�� TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���<{�5TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���C{�UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��B{�STAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��A{�TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��@��9TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��E{�}UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��Dm�]UJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��I��cUAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��H��]UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��G�� UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���F{�5UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��L{�SUAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��K{�UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��J��9UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��P��cVAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��O��]VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��N�� VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���M{�5VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��S{�SVAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��R{�VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��Q��9VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��V}�VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��U��]VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��T��GVAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��Z��cWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��Y��]WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��X�� WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���W{�5WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��]{�SWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��\{�WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��[��9WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��`}�WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��_��]WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��^��GWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��d{�XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��c��9XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��b��cXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��a��]XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��f��GXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��e{�SXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���i}�XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��h}�XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��g��]XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��l��cYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��k��]YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��j{�EXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��o{�SYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��n{�YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��m��9YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��r}�YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��q��]YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��p��GYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��u{�ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��t{�EYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���s}�YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��w��GZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��v{�SZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���z}�ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��y}�ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��x��]ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��|��WZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{{�EZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��{�[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���~{�ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��}��AZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&����G[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&�� {�S[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���}�[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}�[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����][Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����W[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT � �q�� ��]\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192���{�[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �r �_�� {�E\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182��� }�\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }�\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 ! �%! ���{�\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.�� ��W\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��{�_\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd 8���m�A\Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��{�U\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � �� � ���}�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����W]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��{�U]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���{�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �u �_�� {�E^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182�,�� {�_]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd =���m�A]Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 e �r+��V��: � � e D�j � 0b25bab3a8a0341d22387d3674f6676645e3d3d497d2de92de115a56fa012b1bD�i � 33ead8c29c4da7be1c35398bea14adbd1069eb04196df8a75ddffab71562e778D�h � 0de12d2701881f7f8bd093302babcb112ad65af4943bd2e0d2bcb2884f12012dD�g � 89818b9dde137228b185c849e8eec7f90bed6867be5b294a8b8121f52776af6aD�f � f2a450757e610e9d7a49050e04cab12edad074ddca95fd92a67972bd61fcbabaD�e � 0f4b94a13ab49a4fb2ac8ff3106cdaa6e83e43757720457189e685e7a55ed6d6D�d � 970a62a2a5e145cc2c8fa7e55e770b427abb4943c6d8e85bb81c928a192bb407D�c � 22d64046fb95580843be1a65bdeaa8f2a9beca7721f0af5f20f9263a59cc2977D�b � c76bb943b6a1a6711f5c6301f55730c1b173e983e6b7b095c9d0135c7b6a52f0D�a � 7abbb0853851a20592aac6a51b52bbe28466f3f0ee1d83a240a39b4e4f336537D�` � 2f2f67956f80076c79a81d009a5aee971589176deeda7985a84ca07ae0164a5aD�_ � 3603a5475d52875262a18bc253888633c218b9df5c6fbdfad0972c07da32b981D�^ � 72866ddd3fc9bb8286ebd7b4f6c5d977fc3e7925268a253cfefe4511c6e90150 ! �%! ��� {�^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#�� ��A^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.�� ��W^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��#{�_^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd A���"m�A^Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��!{�U^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ? 8=? �y��&{�y^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��%��g^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��${� ^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 i � i �.��(��W_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��'{�E_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��+{�U_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���*{�_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��)��A_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � �u� � �v��/��g_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��.{� _Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642�,��-{�__Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd F���,m�A_Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � � ���1{�`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�y��0{�y_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966 I � � I �,��4{�_`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd I���3m�A`Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��2{�U`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��8}�=`Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��7{�y`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��6��g`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��5{� `Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 � }� � ���;{�aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�&��:s�[`Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��9s� `Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 I � � I �,��>{�_aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd M���=m�AaJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��<{�UaAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��B}�=aAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��A{�yaAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��@��gaAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��?{� aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 n }� � n � ��F�bSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��E�#bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665�&��Ds�[aAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��Cs� aAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 s ��O� � s ��L�bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ks�5bJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��J�{bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��IybAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��H�cbAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665z��GybAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665 / �< � / z��QycAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��P�cSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��O�#cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���Nw�?bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Mw�!bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��V�cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Us�5cJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��T�{cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��SycAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��R�ccAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��[s�5dJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��Z�{dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��YydAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���Xw�?cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ww�!cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��_w� dSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���^w�?dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��]w�!dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��\�dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��d�{eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��cyeAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��bw�WdAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��aw�EdSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��`i�dJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��iw� eSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���hw�?eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��gw�!eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��f�eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��es�5eJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��lw�WeAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��kw�EeSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��ji�eJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���mw�3fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��o��;fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��n��QfAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��s��AfAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��r��AfAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��q��yfAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��p��7fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��v{�}fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��u�� fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��t��fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���ww�3gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��y��;gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��x��QgAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��}��AgAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��|��AgAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��{��ygAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��z��7gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{�� {�}gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��~��gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ����;hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����QhAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����AhAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����AhAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����yhAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ��� {�1hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{�� {�}hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K����hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � �� ��;iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p�� ��QiAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����AiAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����AiAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����yiAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� �� ��7iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���{�1iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�}iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K����iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ����}jJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#����AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082�����jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{�� {�}jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#�� ��AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#��!��AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082��� ��kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527��� �� kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527��� {�5jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 e �r+��V��: � � e D�w � 3038e1befe3903f7b2bfb4fb5ed1ee07a0ba36db33ae2aae4ba05e4040d2b65fD�v � 1619875cba8598818f4bb31d4ba22a7d88804cab9b8ed1e66cb4cf18b1b446cbD�u � ecd28bfd8a7f97d111587dec88746bdc8143ed9ea22a73f2c05141e5361dc7c2D�t � 0f91ee82a0f353071438675ca34ab961c867b90d20e8e45c2472604fdc1165ecD�s � d5fa6533d980b7889d1404f6dda42ce2de80411d4079bd78b7ce3257cb36e5deD�r � d24b5e95b20420b1e37b28037c9bd5175c6fbfd17e6a78347fb26b2792a126efD�q � 237858b698163e9a4615ec1ab98636d66cd7e26deb3512708bd88164019a1994D�p � 2e548be4d940969b8feee6cc4ffb8dde5ac295e684713eba0f96b20f287e7b40D�o � cd2e66ab8554e43fed6cf3a6fe7067b925de6a4ebe0acd82af46e341ce011229D�n � 5ec49c65245b5b4768c2ac475d313f22f92daa8114cbfc555c7189d5844f7b24D�m � f1402f59f4309e9a2ad497a9699c098b61381170de7f600a6a7636db589400d5D�l � 155a01df2abb9e5b0463d2bbe0314d3147245d1540cc0e5026de16abc670d0e6D�k � 19cc17be5a8b2b11edcbc35b6648252c7d5913d500ab82bda2d44c47f0d3f440 R �J� � R �#��&��AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��%��AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��$��AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��#��AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ��"��}kJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ 9�� :�� ;�� <�� ?�� @��# B��& C��( D��+ E��/ G��1 H��4 J��8 K��; L��> N��B O��F P��L Q��Q R��V S��[ T��_ U��d V��i W��l X��m Y��o Z��s [��v \��w ]��y ^��} _�� `�� a�� b�� c�� d�� e�� f�� g�� h��! j��& l��+ m��/ n��3 o��7 p��; q��? r��C s��G t��K u��O v��S w��W x��[ y��_ z��c {��f |��j }��n ~��r ��v ���z ���} ��� ��� ��� ��� ��� ��� ��� ��� ��� ���$ ���( ���) ���- ���2 ���3 ���6 ���7 ���; ���? ���A ���E ���H ���L ���O ���R ���V ���Y ���\ ���` ���b ���e ���h ���k d� �{��+{�}lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��*��AlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��)��AlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���({�5kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��'{�}kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��/��AlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��.��AlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��-��1lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���,{�5lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��3��AmAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��2{�}lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��1��5lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��0��7lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��7��1mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���6{�5mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��5{�}mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��4��AmAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��;��5mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��:��7mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��9��AmAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��8��AmAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��?m�SnJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��>{�}nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��=��5nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��<{�}mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��C��)nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���B{�;nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���A{�7nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��@{�OnSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��G��5oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��F{�GnAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��E{�}nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��D��AnAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���K{�7oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��J{�OoSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��Im�SoJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��H{�}oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��O{�}oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��N��AoAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��M��)oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���L{�;oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���S{�;pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���R{�7pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��Q{�OpSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��P{�GoAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��W{�GpAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��V{�}pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��U��ApAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��T��)pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��[{�OqSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��Z{�}pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��Y��]pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Xw� pJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��_��AqAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��^��)qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���]{�;qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���\{�7qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��c��]qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��bw� qJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��a{�GqAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��`{�}qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���f{�;rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���e{�7rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��d{�}qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��j{�GrAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��i{�}rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��h��ArAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��g��)rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��n{�ArAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��m{�}rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��l��]rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��kw� rJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��r��AsAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��q��)sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���p{�;sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���o{�7sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��v��]sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��uw� sJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��t{�GsAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��s{�}sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��zw� tJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��y{�GtAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��x{�AsAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��w{�}sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��}{�AtAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��|{�}tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��{��]tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{�tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����AtAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��~��'tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��{�}uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��w� uJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��{�GuAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+�� {�]uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#�� ��AuAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�AuAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��{�AvAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q�� ��]vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810��� {�uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���{�vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����AvAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�}vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�]vJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��{�AwAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ��� {�wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+�� {�]wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����AwAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;�� {�}wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$�� m�]wJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 e �r+��V��: � � e D� � e87677e240924426b72cfef3f1ea5a1e88a7a4f5e9fd2f778a2cc3fa1a10069aD� � 76f4f248ab4aaef273c6428865ba506ee4dcc78c5a1d7c81a8d95a729a9ac4a0D� � f7f969b6625cce5d7207b8a291d03841700e7b868361f6f98ce61bb3cc624622D� � 97eec08dd36b082c41af38fa508339931bbf380795208dfcf82213afc0e5486dD� � cb236ed8e588d128b8cdc78afdce6379dcd39b817725c547e7f06734476accd8D� � dff37a0add22b38eab5365de428508592ec00dc762e1cb45853495efb7c80c04D�~ � 764c4140bd73b1c0bdc434edd88f8c15595f4b1c04c426277e3e1b098ebe7d16D�} � 64083e41574124b62214c724c95ecf69227a63f84cb8ea3c1b91c9e46909d214D�| � 95793f42b845d0ea4f32a235ac9b117b776a44e3f656a26633a3012f93a31bfeD�{ � f95f722b442bc9d91784e68a17b61860bc39197eaa93b49c63ee4572dd5a1007D�z � 46649389b1065af3dd7807f1fef23cb1e6f50351ea151d97424e8b8a75c616f3D�y � 8bebe621091a0ae4cea699aab647472b02128fdedc6cd35f7a87166bd62ed233D�x � 4c39d29f58affbbc0dca6ea29bd2dd9b75658d24d46f216c7de17b46f021b13e � ^� � �#��$��AxAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��#��'xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��"{�AxAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��!{�}xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��(m�]xJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���'{�xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��&{�]xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��%{�{xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��){�}xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��-��'yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��,{�AyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��+{�}yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���*{�5xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��2m�]yJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���1{�yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��0{�]yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��/{�{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��.��AyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��3{�}yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��6m�]zJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���5{�zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���4{�5yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��7{�}zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��;��czAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��:��]zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��9�� zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���8{�5zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���?{�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��>{�SzAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��={�zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��<��9zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��A{�}{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��@m�]{Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��E��c{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��D��]{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��C�� {Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���B{�5{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��H{�S{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��G{�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��F��9{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��L��c|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��K��]|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��J�� |Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���I{�5|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��O{�S|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��N{�|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��M��9|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��R}�|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��Q��]|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��P��G|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��V��c}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��U��]}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��T�� }Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���S{�5}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��Y{�S}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��X{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��W��9}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��\}�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��[��]}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��Z��G}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��`{�~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��_��9~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��^��c~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��]��]~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��b��G~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��a{�S~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���e}�~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��d}�~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��c��]~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��h��cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��g��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��f{�E~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��k{�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��j{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��i��9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��n}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��m��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��l��GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��q{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��p{�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���o}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��s��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��r{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���v}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��u}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��t��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��x��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��w{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��{{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���z{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��y��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��}��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��|{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��~��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT � �q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �r �_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 ! �%! ��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.�� ��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ���� m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'�� {�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � �� � ���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �u �_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182�,��{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ! �%! ��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,�� {�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ���� m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'�� {�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ? 8=? �y��"{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��!��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C�� {� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 e �r+��V��: � � e D� � 4c86c1c3d77ede8a23e4eef1b4c3e4de9e50b799ed8dc0e6a6091ff032631cf6D� � 2b98912d64d86fdfe8af76dc95ea23e41332536c8e0ef98223e9a33f2d227f22D� � c77e3e9c9f9cc48a40bb188838bad833e1ea361ee0ba3424abed546f3945d701D� � e78824bc6d2ccd3f5942b851ce6c3323367ca0cfa615dc8c95158aee19c123feD� � d1a6eb397fc04c57428b2ed1f9e3077ed639a5877ef02b2312725fb99c17c807D� � 30c32ac3292a24f2136302bf5bf2d8ebf572bc2b8c57b4cb3c50ffeb223e144eD� � eb01e604d2abe850e31d2092b9db3c5b0df3ee2c53ee80d31ea248c0962ea297D� � 9b0f357ea1eeba57c0d266260414871735cb04729cc62e43ab7bc3503538cb95D� � bce31a77615b379250e7eba11be12018aecf44bf33cd3d92aba684b157074907D� � 56ec7e50303f9b981bec76c83f17fd6d6eaafaf4b44ba798d7dd4592b9c6663dD� � fc6444986c7f47167fd58aa8888952344750766901c89c5c31b69ed13631e92dD� � e6d47a4c88646ebb1f6ff54dd92d1dda1c8abb10bc8530e1cfe498c70ff1db87D� � 226ad3151c609e6c6ae4f2fcadec7bd71f08fdb6c976380ebc8d8c0eac5afbfd i � i �.��$��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��#{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��'{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���&{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��%��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � �u� � �v��+��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��*{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642�,��){�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����(m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � � ���-{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�y��,{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966 I � � I �,��0{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ��/m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��.{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��4}�=�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��3{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��2��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��1{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 � }� � ���7{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�&��6s�[�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��5s� �Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 I � � I �,��:{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd Ƃ��9m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��8{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��>}�=�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��={�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��<��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��;{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 n }� � n � ��B��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��A�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665�&��@s�[�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��?s� �Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 s ��O� � s ��H��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Gs�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��F�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ey�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��D�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665z��Cy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665 / �< � / z��My�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��L��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��K�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���Jw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Iw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��R��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Qs�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��P�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Oy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��N�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Ws�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��V�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Uy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���Tw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Sw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��[w� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Zw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Yw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��X��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��`�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��_y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��^w�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��]w�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��\i��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��ew� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���dw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��cw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��b��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��as�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��hw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��gw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��fi��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���iw�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��k��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��j��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��o��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��n��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��m��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��l��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��r{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��q�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��p���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���sw�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��u��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��t��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���q ���s ���v ���x ���{ ���} ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���" ���$ ���' ���+ ���- ���0 Á�4 ā�7 Ł�: ǁ�> ȁ�B Ɂ�H ʁ�M ˁ�R ́�W ́�[ �` ρ�e Ё�h с�i ҁ�k Ӂ�o ԁ�r Ձ�s ց�u �y ف�| ځ�~ ہ� ܁� ݁� ށ� ߁� � ၨ と" 䁨' 恨+ 灨/ 聨3 遨7 ꁨ; 끨? 쁨C 큨G K O �S �W �[ �_ �b ���f ���j ���n ���r ���v ���y ���~ ��� ��� ��� ��� �� �� �� �� �� ��$ ��% ��) ��. ��/ ��2 ��3 ��7 ��; ��= ��A � �q � �#��y��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��x��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��w��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��v��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��|{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��{�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��z���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��~��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��}��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?�� ��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�����Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ����;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?�� ��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� �� ��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ����}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082������Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082��� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#��"��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��!��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� �� ��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��'{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��&��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��%��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���${�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��#{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 e �r+��V��: � � e D� � 7086a3c094b4e91c8ec76f30de930c4f4c0d0eb7f9617e94c419d74aabb4f793D� � e9370bcf27554400437736d6d3c4091baa10166592baf0f0a1912084c024255dD� � 499aafdde42137b651f07de95acdb9b2b0426c0923756ba0bb98c74731260debD� � 694a1661be3ee29b44619821670f2826998a9100cefc0efc36d04db24b211e47D� � 1f2763028ec3d49595e594f3c26e4361b3462c3391db1c8dbebdb12aeb792896D� � efa7cbf450462d4d95389173c50afbb6786eb202258fbc8ba90ef57e2459561aD� � 4521dde116f75afbb70beca46c5f369e56507e92501cb8051a6caf5aebe62defD� � 87e7e547e429b8f05895e13d2852cf0bb18f91a4aba2a1bddc445c950284fc3aD� � 54bf6ecd682245bc83076c67fa21c5c7db62c883a50972dc40dbfeda8a121125D� � 18a12adf2bee6b8b9f5f9ed18be2ae1759d9d9d3aaeac59fd9a62973cfd8e759D� � e61584e7d9905cb45027e741b94c7b54f6b883091b652d2e13a682d244a0d9c9D� � f3c1504a0f9e8be3e261212092e89009d8b01f3fe0f1804ed10e767846e87d26D� � 49275f52aa1c71edc688e6802a1f2c8b136594807077f4aa90e4e2686edd8ddb � d\ � �#��+��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��*��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��)��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���({�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��/��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��.{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��-��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��,��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��3��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���2{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��1{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��0��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��7��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��6��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��5��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��4��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��;m�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��:{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��9��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��8{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��?��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���>{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���={�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��<{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��C��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��B{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��A{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��@��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���G{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��F{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��Em�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��D{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��K{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��J��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��I��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���H{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���O{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���N{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��M{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��L{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��S{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��R{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��Q��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��P��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��W{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��V{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��U��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Tw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��[��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��Z��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���Y{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���X{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��_��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��^w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��]{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��\{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���b{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���a{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��`{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��f{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��e{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��d��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��c��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��j{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��i{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��h��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��gw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��n��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��m��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���l{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���k{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��r��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��qw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��p{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��o{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��vw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��u{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��t{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��s{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��y{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��x{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��w��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���~{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��}{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��|{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��{��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��z��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � �� {�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� �� {�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��$m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���#{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��"{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��!{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��%{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��)��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��({�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��'{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���&{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 e �r+��V��: � � e D�+ � f17e881111b5bdf792e8c6c4ebf56c864fe82ead7236e9d1714054bb3577b4c1D�* � c538ef407bc0967b16f615b25eb59fae617d84051826819aa6837e85e7ff4db9D�) � b153786a744ee0f5ed2df73a98fd3332ceb25e5bd7615afa48574656dfca002fD�( � 478b6dae53400cf32a4edf127885888456e0d40687b130621abfb48015757969D�' � 58fb7f4dacffd07cdbe657ec86f4af0d40760828a968dd894a92ea0fc7028255D�& � 0cb275f3f74903e0b995fb60bd6d2d45b6d75c0f10a329bf957ff43cddf17096D�% � 28a98571198ec6a28a437669678c624aad4fa1d5a6a2dd1bfb4884dddc584a5cD�$ � 0688bc15522e5a3eee9f6ec2d771f77743a5979f6ac5afa0ec5059daa5926e35D�# � bb040f65e782eb45f2e750692dccebe3a40db82890f2982e835b5946fb8a3a13D�" � feeaaecf67702b0e5815ef109a94fbdbbce95e0e6228db0f8c286f9f61a845ddD�! � 9c713d3f8c2da0e96f093a322cd54bca18ff323dd824b4a6cfa730232160f754D� � e450e9d5bc1c7f5f5f4f8b5d7ce575e0a5756a4bab5ed98be38ec59c1ffb0276D� � 529b379f29069f8d8015829e0ce51b950cdfd5764b3d2de634462f2f45957b29 v XY� v �$��.m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���-{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��,{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��+{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��*��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��/{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��2m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���1{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���0{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��3{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��7��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��6��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��5�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���4{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���;{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��:{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��9{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��8��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��={�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��<m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��A��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��@��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��?�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���>{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��D{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��C{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��B��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��H��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��G��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��F�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���E{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��K{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��J{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��I��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��N}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��M��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��L��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��R��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��Q��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��P�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���O{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��U{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��T{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��S��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��X}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��W��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��V��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��\{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��[��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��Z��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��Y��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��^��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��]{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���a}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��`}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��_��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��d��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��c��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��b{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��g{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��f{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��e��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��j}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��i��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��h��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��m{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��l{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���k}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��o��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��n{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���r}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��q}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��p��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��t��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��s{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��w{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���v{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��u��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��y��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��x{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���|}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��{}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��z��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��~��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��}{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT � �q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �r �_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 ! �%! ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,�� {�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd *��� m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � �� � ��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �u �_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182�,��{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd /���m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ! �%! ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd 2���m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ? 8=? �y�� {�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v�� ��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C�� {� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 i � i �.�� ��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_�� {�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��#{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���"{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��!��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � �u� � �v��'��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��&{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642�,��%{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd 7���$m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � � ���){��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�y��({�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966 e �r+��V��: � � e D�8 � d17d23e9f3e2cd89c98f84ba07345a6c51f1dc3d67f5d52d483e6f2ed2d93751D�7 � f63528cfd40b5a5fb0d1e92cd4b91403bab6d49b9bd38ad0aef9e293a98a4b2aD�6 � e1b83152038966e7b6a720ab0871b052fb0dc4df9c843243ac9f34f68ff8a58fD�5 � 74c5d742dbaa75738c5c52f77416c65b88472bdd5eafe0c39fe63d1816522476D�4 � 115dde7a103bd42e620ddd732d36ef609984603c7103f803f2d1d8bac1bef6c9D�3 � 28d98e71d3a3f5bef8abd07f0acc8353279545bf2aee26db49d58baded52104eD�2 � 4c5528d38245aa14b33d05948eb02c322e95528485c9970733d2e5a577774d6dD�1 � 1699532891581ac8f26d0ec07605ccb1d294d5a52f3b72ac2d996d064199d55eD�0 � 3391ca1aa9dc6a5e4ed248a618ad059946ec5c65625f2566cbe9773d60646f54D�/ � 08f9a253bf2654c7f281ec675c59f7bd4bd0f06ed499e82831fcd79aef82e50bD�. � 4a40dbfa3e0e5c2e7457bda18c82a1c0d3f49f91b8d548c568fea520908bec6bD�- � e49bddae5537553d4d5a78524aa8b60eccbdcb546e79e3e046c946ef9da09ef0D�, � 679e963c7906dde82f6ac27f545036d5c38c79be36b3c643018742f7c21953c3 I � � I �,��,{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ;���+m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��*{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��0}�=�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��/{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��.��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��-{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 � }� � ���3{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�&��2s�[�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��1s� �Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 I � � I �,��6{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ?���5m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��4{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��:}�=�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��9{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��8��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��7{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 n }� � n � ��>��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��=�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665�&��<s�[�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��;s� �Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 s ��O� � s ��D��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Cs�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��B�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ay�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��@�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665z��?y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665 / �< � / z��Iy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��H��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��G�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���Fw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ew�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 bR }RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��H ��K ��N ��R ��U ��X ��\ ��^ ��a ��d ��g ��j ��m ��o ��r !��t "��w #��y $��| %��~ &�� '�� (�� )�� +�� ,�� -�� .�� 0�� 1�� 3�� 4�� 5��# 6��' 8��) :��, <��0 =��3 >��6 @��: A��> B��D C��I E��N F��S G��W H��\ I��a J��d K��e L��g M��k N��n O��o P��q Q��u R��x S��z T��~ U�� V�� W�� X�� Y�� Z�� [�� \�� ]��# ^��' _��+ a��/ b��3 c��7 d��; e��? f��C g��G h��K i��O j��S k��W l��[ m��^ n��b o��f p��j q��n r��r s��u t��z u��~ v�� w�� x�� y�� z�� {�� |�� � K�Lt � ��N��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ms�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��L�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ky�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��J�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Ss�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��R�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Qy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���Pw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ow�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��Ww� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Vw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Uw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��T��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��\�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��[y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��Zw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Yw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Xi��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��aw� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���`w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��_w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��^��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��]s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��dw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��cw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��bi��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���ew�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��g��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��f��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��k��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��j��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��i��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��h��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��n{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��m�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��l���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���ow�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��q��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��p��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��u��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��t��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��s��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��r��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��x{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��w�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��v���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��z��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��y��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��~��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��}��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��|��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��{��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I�� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�����Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ����;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ��� {�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I�� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ����}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082������Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527��� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082������Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ����}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��#{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��"��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��!��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082��� {�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��'��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��&��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��%��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���${�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��+��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��*{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��)��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��(��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 e �r+��V��: � � e D�E � a1c2e9d4603673b1df8482afca3dab078eea9124690469ef6dee7f9d4e663b29D�D � e9036e2b707bcda2cefdab377479ae65cfc1d4f0da25dc54312d9786b65eb947D�C � a11deef2840f7fe80ce1b946609ec3aa04069da0557383edb2dd88107312e356D�B � 8127547ec74cf787276b994c2f00085304d697481622d6712560f5c1fde57dd1D�A � 62bf471ba14072212be41f68548e536d8a022b8fffa4c7fdf94b4dc26c4d7d3aD�@ � cb1e709d6fc4d17df3ff827f54f59d30c0e4cb11b30652b60e0f1087d387bdd9D�? � b5bacd96f28f126743bbc0807bcb665ff0c52ee4b0256b7bcffb9a10f8d18c68D�> � 7bfed40726a8044b0f0685487bd9f5131499f3c91242720ec1c55565601abd18D�= � c441b3fe43905a4ba494377fd18f7afb8d59b3c95abfb93384cd0577b3568a5cD�< � 2117399e425ef95fb4a8b8d38c39a38d73b5e0ad8f8212f6e467901f5f05ca9cD�; � 31f1aea6422bc6b0072f7c26fc3200a90ac929108eee513f7452415171c8a9bdD�: � ceb4699a86911fa2a032df43313a18847098f66921adb5fab1298f3791d1b144D�9 � 4c7a4b1402ce62b471994dd364f3e883167ad5ba8ebba01d67f8ceee2f63d6a5 \ XX� \ �[��/��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���.{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��-{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��,��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��3��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��2��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��1��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��0��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��7m�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��6{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��5��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��4{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��;��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���:{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���9{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��8{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��?��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��>{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��={�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��<��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���C{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��B{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��Am�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��@{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��G{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��F��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��E��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���D{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���K{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���J{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��I{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��H{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��O{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��N{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��M��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��L��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��S{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��R{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��Q��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Pw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��W��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��V��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���U{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���T{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��[��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Zw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��Y{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��X{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���^{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���]{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��\{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��b{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��a{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��`��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��_��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��f{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��e{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��d��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��cw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��j��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��i��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���h{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���g{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��n��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��mw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��l{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��k{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��rw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��q{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��p{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��o{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��u{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��t{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��s��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���z{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��y{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��x{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��w��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��v��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��~{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��}��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��|w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��{{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+�� {�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$�� m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$�� m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+�� {�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��!{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��%��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��${�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��#{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���"{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��*m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���){��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��({�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��'{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��&��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��+{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��.m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���-{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���,{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 e �r+��V��: � � e D�R � 6bcf5f3e89c2755d81da6331cde8d0f4c05fcdc2ce0250804be9609d9e125125D�Q � 483c0e526fee490fe5e387d8f466ba9336f13e99e38a22801656db9f0ef6fdbfD�P � 89988277f04bdfb0831030270ba38286c5de52d83e5c015250fa99a89d9f5a47D�O � 8ccfeff30f33569622e94d656bd899c28dec3d943fe48b0140ff2230c98cf112D�N � 40e235c4553d138143d79a740ff6929dacaa7d0bb99c84caf67b643e58c12a99D�M � 9c6296e27d68895aa9814be130a3a7bb16cd8fa2ec14d63699d1a6a1223dc662D�L � e12fcfca359b3c38140cf59ead8a267ef1c024a4ed16d4250b7d14c94300a665D�K � 04ec871279754a00e7006a2f023b95ed305dc36a9ff23d65ed20cbf987b07ffdD�J � b9cbd1c4954833f2a8f3d68b1cc92407f3df064e044f0f7f335563bf1983963bD�I � f6fbb6525d675cb023750b0e38502f6e9d30cb7ce70f98d75a7bc6a76d175598D�H � 8e0d749ba5b5f6a9925903f7cb854321aba39a3bc393c295fbbff22c33feb07cD�G � 7f699df3b1a5a03f46da8dc559615cdabf4c01094c12f89d7bbbbb93f3744af6D�F � 8244566af4a36c890bd6abe69ab5f9fd27a7847a32c6063c2ec5fb6de40b84fe � � �;��/{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��3��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��2��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��1�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���0{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���7{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��6{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��5{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��4��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��9{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��8m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��=��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��<��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��;�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���:{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��@{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��?{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��>��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��D��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��C��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��B�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���A{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��G{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��F{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��E��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��J}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��I��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��H��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��N��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��M��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��L�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���K{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��Q{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��P{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��O��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��T}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��S��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��R��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��X{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��W��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��V��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��U��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��Z��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��Y{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���]}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��\}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��[��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��`��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��_��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��^{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��c{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��b{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��a��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��f}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��e��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��d��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��i{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��h{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���g}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��k��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��j{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���n}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��m}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��l��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��p��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��o{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��s{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���r{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��q��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��u��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��t{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���x}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��w}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��v��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��z��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��y{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT � �q��}��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192���|{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��{��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �r �_�� {�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��~}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 ! �%! ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � �� � ��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.�� ��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_�� {�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �u �_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182�,��{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ! �%! ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ? 8=? �y��{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v����g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ~�� ��! ���% ���* ���+ ���. ���/ ���3 ���7 ���9 ���= ���@ ���D ���G ���J ���N ���Q ���T ���X ���Z ���] ���` ���c ���f ���i ���k ���n ���p ���s ���u ���x ���z ���} ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���# ���% ���( ���, ���/ ���2 ���6 ���: ���@ ���E ���J ���O ���S ���X �] Á�` ā�a Ł�c Ɓ�g ǁ�j ȁ�k Ɂ�m ʁ�q ˁ�t ́�v ́�z �~ ρ� Ё� с� ҁ� Ӂ� ԁ� Ձ� ց� ׁ�# �' ف�+ ځ�/ ہ�3 ݁�7 ށ�; ߁�? �C ၮG K のO 䁮S 偮W 恮Z 灮^ 聮b 遮f i � i �.�� ��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'�� {�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � �u� � �v��#��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��"{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642�,��!{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ���� m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � � ���%{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�y��${�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966 I � � I �,��({�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����'m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��&{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��,}�=�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��+{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��*��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��){� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 � }� � ���/{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�&��.s�[�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��-s� �Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 e �r+��V��: � � e D�_ � b346f29da69c21241a449decf0f47b1117502c6f136b70a23a24f1438e919766D�^ � 2596d8e58b7977e350ac45b39a8c22507bf5f23a48e5c5af3025b81016622b58D�] � a7cb9faf1648281d26c03a5952b9c015a6e302f5018328fa99f1cd9aafbf89c4D�\ � 935642d829064a30780cd84c8e1ca654486d06cc675f9a06e246d6b366d333c5D�[ � 58b23e3f8226650315902eba6ab9e2d2a81f816aa85d12cebf74af56a8504c16D�Z � 7efe56d9bcad9ff6dc145a50baf931d2125888da4d984a84fd14a509862f3751D�Y � 4851da54ebe84600b0c7af372a59c38094992018f2ffe45bec040b2dd5d380bdD�X � db00d954c05dbf5ebc5e47f7671980d64911b459229bc83c8dcd6c60c4ce0b90D�W � d23dd2eb44577c74053a9b0d2df44d8fb4618ffcdc560bc60003b1393107baf1D�V � b2017332dfd84aebbbfe8b857c333da3eb192f27956aa48ab410bc0ea011ca72D�U � d297c29388bc4f582e226fb85070d6108bb21fb17acb88d7d2de900bfcc84423D�T � c6835fc2dc5e5741781c97f0dd76cd871e82a83dded531a6ca44d9a58abd9a2aD�S � b1fa6d1fdf39dbf8d3397fcaa156e0402d827e1c451d262b62c3899c837fc47a I � � I �,��2{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����1m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��0{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��6}�=�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��5{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��4��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��3{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 n }� � n � ��:��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��9�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665�&��8s�[�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��7s� �Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 s ��O� � s ��@��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��?s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��>�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��=y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��<�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665z��;y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665 / �< � / z��Ey�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��D��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��C�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���Bw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Aw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��J��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Is�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��H�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Gy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��F�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Os�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��N�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��My�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���Lw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Kw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��Sw� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Rw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Qw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��P��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��X�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Wy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��Vw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Uw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Ti��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��]w� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���\w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��[w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��Z��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ys�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��`w�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��_w�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��^i��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���aw�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��c��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��b��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��g��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��f��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��e��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��d��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��j{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��i�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��h���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���kw�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��m��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��l��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��q��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��p��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��o��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��n��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��t{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��s�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��r���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��v��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��u��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��z��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��y��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��x��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��w��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���~{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��}{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��|�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��{���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � �� ��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�����Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � �� ��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082��� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527��� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082������Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ����}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082��� {�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��#��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��"��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��!��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811��� {�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��'��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��&{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��%��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��$��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��+��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���*{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��){�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��(��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��/��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��.��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��-��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��,��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��3m�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��2{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��1��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��0{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 e �r+��V��: � � e D�l � 3bf5af40702f37c01b474763465e7acba66d1f9cca53e59538aa92a72f018a35D�k � 208f92bb62fd7e69ec6decb3b63b18a2c7e51d8c1ea83099de63b56163c9d1d2D�j � 25f4706211e06a217d7143f0aead6ea49f2a47344d314396d09e691a83a51848D�i � 7d5c7ed2663b8b4d93ccdce3e87fa7b84c42697397d9594170591871b706c60dD�h � 5ef7809b46025089f784a5c5eef97c5cb1c0ae4576bd7a05f04c657f2231d054D�g � 14d75975f6b77789e102a09b3e0c65a16a5cd38e795fdb34c4f40cf970a67b93D�f � f1896e8ffe63eff76d82b6ef313c62631fce45258dee3c4ac0e2ffe4b8e841e6D�e � b82ab048b9697892096528f61737d1713449b0dfdae049f4533ac7d1e469ad0eD�d � 83d5e8fcf034f22af47eccbbd1c693274a94cfc7afdec007e5cebcb5d3ed2a73D�c � 25ac1048044afca67ce7c131d644b1fbf4661666b58a9bf482f289e5b1905c0fD�b � 12a2e4e010484b9e7bd30fc89af801f0e1e212a2faaaa5017acde6e83cd52964D�a � b2ab719c45f136d393fa35fa34b5f7ce41406fba2c86e188fc3d3823aabe7688D�` � 1cbeca0135b7f2bc07c9bcd75fc0fe3f09797e00adfb9350ced9cd89eeb77a8e ? W:� ? �W��7��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���6{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���5{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��4{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��;��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��:{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��9{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��8��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���?{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��>{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��=m�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��<{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��C{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��B��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��A��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���@{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���G{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���F{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��E{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��D{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��K{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��J{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��I��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��H��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��O{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��N{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��M��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Lw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��S��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��R��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���Q{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���P{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��W��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Vw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��U{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��T{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���Z{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���Y{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��X{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��^{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��]{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��\��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��[��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��b{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��a{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��`��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��_w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��f��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��e��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���d{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���c{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��j��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��iw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��h{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��g{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��nw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��m{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��l{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��k{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��q{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��p{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��o��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���v{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��u{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��t{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��s��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��r��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��z{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��y��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��xw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��w{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��~{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��}��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��|��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$�� m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � �� {�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$�� m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��!��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� �� {�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366��� {�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��&m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���%{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��${�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��#{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��"��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��'{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��*m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���){��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���({�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��+{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��/��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��.��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��-�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���,{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���3{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��2{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��1{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��0��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 e �r+��V��: � � e D�y � 447bf3552c5156b143306396c3569328e80baec97cb1a11315280cd2f3b38e0eD�x � dc71096c57fc06718137b2f317d123ac81f3c58557e1d9e42b1d0cceaeb95d38D�w � f8d95a99893e9265f3f6125f684c56c23afa3834653a04d0e9dbe9360a6aaf5dD�v � 9a2538ebee1a09c61de1b04f3ce4e0727b75e499fc1cbe6df0a72d5507871c0eD�u � 639be57d983a29004b74a7f3b753de3e62c2aca8e576d15d3d5b4ca2b847507aD�t � 48b28be8658e81953a40daf5ae041fd07fe585facbf0a5c985d98cee88b3f0aaD�s � 0dfc6e8ea7cfb111b83da1e6ce7bfc3f5f3c353f61b25a21812ba01aed81cbedD�r � 981af71f35ff127f9a818e70105e8d4597de1eae244d22caa97ea246a29deee1D�q � 0a8fa0a8748dd4667a74653e840521e8d0602e1f9210bb2b27d75c59318081c0D�p � dc7ff660e8cb322dcf0a071b2f556dfa57cc7a3c0a543524ae2c9b6a807d8262D�o � 248b6271c4100aa6ae97c9a74a7d3b0bf217ed7e074e51ff84d4eb50183ea9a5D�n � 503b6775fa6993e20617e140090892909b171ba5cb9cf102f14e12e8e3722fbfD�m � 993ebb29f0261ce55c92629ffd652f5fd4b867dbb41765fad94a00716ec5e8b1 W �;��5{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��4m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��9��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��8��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��7�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���6{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��<{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��;{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��:��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��@��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��?��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��>�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���={�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��C{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��B{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��A��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��F}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��E��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��D��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��J��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��I��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��H�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���G{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��M{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��L{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��K��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��P}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��O��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��N��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��T{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��S��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��R��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��Q��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��V��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��U{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���Y}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��X}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��W��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��\��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��[��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��Z{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��_{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��^{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��]��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��b}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��a��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��`��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��e{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��d{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���c}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��g��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��f{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���j}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��i}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��h��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��l��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��k{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��o{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���n{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��m��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��q��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��p{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���t}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��s}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��r��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 bR VRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ 끮n 쁮q 큮v z � � � � � ��� ��� ��� ��� ���! ���& ���' ���* ���+ ���/ ���3 ��5 ��9 ��< ��@ ��C ��F ��J ��M ��P ��T ��V ��Y ��\ ��_ ��b ��e ��g ��j ��l ��o ��q ��t ��v ��y ��| �� �� �� �� �� !�� #�� $�� &�� '�� (�� )�� +��! ,��$ .��( /��+ 0��. 2��2 3��6 5��< 6��A 7��F 8��K 9��O :��T ;��Y <��\ =��] >��_ ?��c @��f A��g B��i C��m D��p E��r F��v G��z H��| I�� J�� K�� L�� M�� N�� O�� P�� Q��# R��' S��+ T��/ U��3 i � i �.��v��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��u{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT � �q��y��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192���x{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��w��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �r �_��|{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���{}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��z}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 ! �%! ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��~��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.��}��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ���m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'�� {�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � �� � ���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'�� {�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �u �_�� {�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182�,�� {�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd "��� m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ! �%! ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd %���m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ? 8=? �y��{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v����g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 i � i �.����W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � �u� � �v�� ��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C�� {� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642�,�� {�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd *��� m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � � ���!{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�y�� {�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966 I � � I �,��${�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd -���#m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��"{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��(}�=�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��'{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��&��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��%{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 � }� � ���+{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�&��*s�[�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��)s� �Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 I � � I �,��.{�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd 1���-m�A�Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��,{�U�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��2}�=�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��1{�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��0��g�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��/{� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 n }� � n � ��6��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��5�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665�&��4s�[�Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��3s� �Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 e �r+��V��: � � e D� � 6e91279c2c56161f7ffdfd5a8f8f361d282238b249859e57ac7e8d4b04a799e7D� � c55fbad2b511346ebf2a848c75861a87c98b38738226ac74429144324281ef52D� � f544bc64d6a690d2e5853b042cb5a8c7eb50879dacd1acf3c3eca69966d25370D� � 0cb228d7dc8544ea720f5503724f929baf79d69d2a7d1eb9dd47cf361620788eD� � be2825be40e44e47e533b1d6e13b3145e41e073086a22147b77532548436e30dD� � 03861872c0b045970aa5d709fc96b48dc78114b5fe454d59dff316eb4753ec08D� � fed1a25dff437173e5198969384d287e1c91872362d72445cda5bf8bc78201f5D� � 0bec8227df4692ec640eaf96154a87faa5a1ab3d9c37856f4f8e0c0a98c88525D�~ � 8c2a340bb8e3487639e7851ddf9b80b263ca137dee7948eceddfd372f4b80882D�} � 6f89875815ef474fc2dd49d33fb56f30d070a424491a2ab970b04c4b3a36133eD�| � 8b27ff2d6ae464c9929368b71564984ac614007abaed4abfb490c301cdd341deD�{ � c43cc5c86cdd41a4e686f3173df2eca34068dc56d75a5a468786fc13989bd5fdD�z � d5660d632b89221fe127f4475df5c34071486cde5540e458836be4a6b5ab6bcd s ��O� � s ��<��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��;s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��:�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��9y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��8�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665z��7y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665 / �< � / z��Ay�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��@��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��?�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���>w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��=w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��F��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Es�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��D�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Cy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��B�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Ks�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��J�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Iy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���Hw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Gw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��Ow� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Nw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Mw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��L��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��T�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Sy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��Rw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Qw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Pi��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��Yw� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Xw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ww�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��V��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Us�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��\w�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��[w�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Zi��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���]w�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��_��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��^��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��c��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��b��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��a��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��`��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��f{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��e�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��d���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���gw�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��i��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��h��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��m��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��l��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��k��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��j��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��p{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��o�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��n���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��r��; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��q��Q Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��v��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��u��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��t��y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��s��7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���z{�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��y{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��x�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��w�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��|��; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��{��Q Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��~��y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��}��7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���{�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I���� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K���� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ����} Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082����� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{�� {�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082����� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ����} Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[�� ��1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811��� {�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��#��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��"{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��!��5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^�� ��7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��'��1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���&{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��%{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��$��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��+��5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��*��7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��)��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��(��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��/m�S Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��.{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��-��5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��,{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��3��) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���2{�; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���1{�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��0{�O Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��7��5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��6{�G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��5{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��4��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 e �r+��V��: � � e D� � 4b6626a337fe2141755d1e57f9afb5d1914f4b0d752fac9cb28cea90640d95d3D� � e76b18f34fbbf2a1e7810ed95efd446420bc4ee561f16434445b97b5a0d466c4D� � 2b55d4f35dce819b798ee136c0dfb0c453985cfd824a8e839552fa2112ae4123D� � 649c2ee77e6ebe7b0ada06b4afab6acc21bb572fecb9b419d681640d40847bf0D� � 6cd18c7d7a47f7f1e42e63865172f463162be9c7697c5e7b1953c41099a4d25dD� � 39b2ee3cdead3a8fa94b2f7fb082014e56dc28992ac2740a46795004ac7dd6c0D� � 7541eb5333c72fe17aa8e0d7dc2f7f91d8769a57129608043af2b098b5741661D� � 20e9c59ba021cc9600dbade71b83e1e1b014eae44d6ba273d5fa6491d9508f08D� � e3d2e4fe4672614c07f199cf8ea78ca12ec2e4c5bfee735cbffb6dca84ba91cdD� � e2d9e1fc46982332f4c50e35b6e51f62edc6bd78156642b63e2553d404909efaD� � 47005db64df1a2026edd49418e5714bd0cc4b55a22af61ad08162f38d849be23D� � a2a0890a1bee535a6e50b46532778911b437fe971d72e228048964d8dd0f7550D� � 8b331529abc56930e532f91b8634eaa719301817f62a7a7fbbc720594baf85da � \� � ���;{�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��:{�O Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��9m�S Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��8{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��?{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��>��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��=��) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���<{�; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���C{�; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���B{�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��A{�O Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��@{�G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��G{�G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��F{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��E��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��D��) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��K{�O Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��J{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��I��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Hw� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��O��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��N��) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���M{�; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���L{�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��S��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Rw� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��Q{�G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��P{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���V{�; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���U{�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��T{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��Z{�G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��Y{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��X��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��W��) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��^{�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��]{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��\��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��[w� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��b��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��a��) Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���`{�; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���_{�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��f��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��ew� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��d{�G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��c{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��jw� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��i{�G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��h{�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��g{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��m{�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��l{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��k��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���r{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��q{�] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��p{�{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��o��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��n��' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��v{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��u��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��tw� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��s{�G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��{{�] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��z{�{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��y��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��x��' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��w{�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��{�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��~{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��}��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���|{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � �� {�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+�� {�] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��m�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V�� ��' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� �� {�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��"m�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���!{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+�� {�] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��#{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��&m�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���%{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���${�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��'{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��+��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��*��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��)�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���({�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���/{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��.{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��-{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��,��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��1{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��0m�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��5��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��4��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��3�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���2{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��8{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��7{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��6��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 e �r+��V��: � � e D� � f251e57808a6960518cf05f98f4bed5c0b006b5a01550a68ebb9141c79f0a2ddD� � fb53f898a944ec236a811663325ceef801af9d4d3e2c11522ee1bd7a77d9da79D� � 35254d0cedc9b7756462a8c23a1b9bbf476fefd2ec13b879640bcc09a53504b6D� � 5a103d4f3b121195638cf61cb91fbc034b9c2a6deee845296612dfb590ef0859D� � dab70d9c3e9d60e9a4331d2ccb0d2d3dacfe1d41e355572961045f2ce2c22a34D� � e5bf29d89efc9dcdf73e8e8b84b8aa41793d043e3bf944a0c3659d666a13bb4bD� � 2f740a705cf289cc730913827ebc04cd2b4e26e229696914ddce3e48bfee0552D� � 2095e4e98eb5962eb97eb3c3165dd036bf0cc42fbb1cfd2c138811047868000fD� � f1844144d5a3c42025f3ef1788373858de7187d6dd96e9bcddac4b3fd027e5c9D� � 8477e56cf835d806a8f5345ebff218dfbceb351c7bca81b9aa806a2fa8930f02D� � ce32d3269966c385c52153f1c95ee8578b768a8b69a1d2937f50ab40dc45e380D� � a051479c689a04906459e0f87104834ea707b2ffeb1317695704b03edb4c8b2bD� � 47a66548a049d52ad8e7adcde0de98e6768596cb771d5b8ee590193dda421dd4 � � W � �4��<��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��;��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��:�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���9{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��?{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��>{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��=��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��B}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��A��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��@��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��F��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��E��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��D�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���C{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��I{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��H{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��G��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��L}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��K��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��J��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��P{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��O��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��N��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��M��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ X��; Y��? Z��C [��G \��K ]��O ^��S _��V `��Z a��^ b��b c��f d��j e��m f��r g��v h��{ i�� j�� k�� l�� m�� n�� o�� p�� q�� r�� s��" t��# u��& v��' w��+ x��/ y��1 z��5 {��8 }��< ~��? ��B ���F ���I ���L ���P ���R ���U ���X ���[ ���^ ���a ���c ���f ���h ���k ���m ���p ���r ���u ���x ���{ ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���$ ���' ���* ���. ���2 ���8 ���= ���B ���G ���K ���P ���U ���X ���Y ���[ ���_ ���b ���c ���e ���i ���l ���n ���r ���v ���x �| * U* �&��R��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��Q{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���U}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��T}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��S��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��X��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��W��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��V{�E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��[{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��Z{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��Y��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��^}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��]��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��\��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��a{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��`{�E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���_}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��c��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��b{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���f}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��e}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��d��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��h��W Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��g{�E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��k{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���j{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��i��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��m��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��l{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���p}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��o}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��n��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��r��W Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��q{�E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT � �q��u��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192���t{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��s��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �r �_��x{�E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���w}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��v}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 ! �%! ���{{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��z��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.��y��W Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��~{�_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����}m�A Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��|{�U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � �� � ���}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����W Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��{�U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �u �_�� {�E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182�,��{�_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����m�A Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ! �%! ��� {� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.�� ��W Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��{�_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����m�A Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'�� {�U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ? 8=? �y��{�y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v����g Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 i � i �.����W Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��{�U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � �u� � �v����g Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642�,��{�_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����m�A Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � � ��� {� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�y�� {�y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966 I � � I �,�� {�_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ���� m�A Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'�� {�U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��$}�= Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��#{�y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��"��g Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��!{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 � }� � ���'{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�&��&s�[ Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��%s� Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 I � � I �,��*{�_ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ����)m�A Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��({�U Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��.}�= Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��-{�y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��,��g Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��+{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 n }� � n � ��2� Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��1�# Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665�&��0s�[ Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��/s� Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 s ��O� � s ��8� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��7s�5 Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��6�{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��5y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��4�c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665z��3y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665 / �< � / z��=y !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��<� !Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��;�# !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���:w�? Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��9w�! Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 e �r+��V��: � � e D�- � 7a01c8e4b4c1eaaf03f29bc31b1fe91b81c17591f2d6a358c7e57ae3b8103eb6D�, � c0938d8860cf5e93761458738a21c3f5f505e71d1669169693c88f8471d51381D�+ � 8319e904c4b86f6892579492778456a31dcdbb29d4f7b62060dba26486be2a85D�* � 8f21403b3615c8a3c67833bcb49d11b4c3b80d768a6bdba42abe5d2b299d9cb3D�) � b22aa8999bea98b78e5fb8b2195a94bb82daa9f6c9469ec768b019d741e439dbD�( � 9592f2b746e7ef4c2e4fd13ac3fad913504fb720911df981e24b63bf2011a6e6D�' � 01b83fa31f2e2ed972aa491423479df2e3e026e54668e3933d3b8b1803fe208bD�& � 50a577d62eed91a0ed5c686f85830b3c9252dff331c94841f673d8f19924250dD�% � 2cee495ddd05e0808ca1e516d0b1ad02fcdf3e46ede1dadb81a285b96ab3648cD�$ � 393806557640081ee6c9dd7dc6ee00e307d9ae676a1a267d20fb4793dda538d7D�# � ba6f42672b28ba6a322e4daf6a3e3fc791a39cdd7e438b6d6954713e77022fa6D�" � b9b371aa85a094ef9bf89ccec7f948b0f98488eac855ba41f5653f61941610e4D�! � 5c5cbbb79d474d8a08d41a7a9eab16454a6204f748c42ff97d2ca8776ea1fbc8 � K�Lt � ��B� !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��As�5 !Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��@�{ !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��?y !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��>�c !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Gs�5 "Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��F�{ "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ey "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���Dw�? !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Cw�! !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��Kw� "Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Jw�? "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Iw�! "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��H� "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��P�{ #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Oy #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��Nw�W "Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Mw�E "Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Li� "Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��Uw� #Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Tw�? #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Sw�! #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��R� #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Qs�5 #Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��Xw�W #Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Ww�E #Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Vi� #Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���Yw�3 $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��[��; $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��Z��Q $Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��_��A $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��^��A $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��]��y $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��\��7 $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��b{�} $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��a�� $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��`�� $Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���cw�3 %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��e��; %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��d��Q %Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��i��A %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��h��A %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��g��y %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��f��7 %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��l{�} %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��k�� %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��j�� %Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��n��; &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��m��Q &Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��r��A &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��q��A &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��p��y &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��o��7 &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���v{�1 &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��u{�} &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��t�� &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��s�� &Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��x��; 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��w��Q 'Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��|��A 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��{��A 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��z��y 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��y��7 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ��� {�1 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{�} 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��~�� 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��}�� 'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ����} (Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#����A (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082����� (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{�� {�} (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����A (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����A (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����A (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#�� ��A )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082��� �� )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527��� �� )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527��� {�5 (Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#����A )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����A )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����A )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ����} )Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��{�} *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����A *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���{�5 )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��{�} )Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#����A *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#����A *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[����1 *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���{�5 *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#�� ��A +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{�� {�} *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]�� ��5 *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^�� ��7 *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��#��1 +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���"{�5 +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��!{�} +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#�� ��A +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��'��5 +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��&��7 +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��%��A +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��$��A +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��+m�S ,Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��*{�} ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��)��5 ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��({�} +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��/��) ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���.{�; ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���-{�7 ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��,{�O ,Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��3��5 -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��2{�G ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��1{�} ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��0��A ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���7{�7 -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��6{�O -Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��5m�S -Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��4{�} -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��;{�} -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��:��A -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��9��) -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���8{�; -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���?{�; .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���>{�7 .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��={�O .Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��<{�G -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 e �r+��V��: � � e D�: � e1f96091d25298a2ba6942bf99057752361acd85a35af09192241146d47a7a08D�9 � 48de10d35c7c78cda02151a71c35178d70d58dce2c1dc876ddabcacf02451fd3D�8 � d042e5b60af5791405d9b06cced6de982519177eed1cee3e7edb8c9002315ac6D�7 � 724f57980c52e692722c8586a68fbb7ecfc81812bf1d923a920abbdb04014943D�6 � 40085a6aba324cf85849d9d215ea0210e30299d2952b61e18b07e9bbd0256068D�5 � 9dc6103c894580255acdaca6f10c631843d1f93573f2546118ae35826f597314D�4 � 2128f5867b50e91bf6e0f43a02f4d16b03085189d8040f386c115ab75f5a842bD�3 � 2ebb08ac7cb76c373713ca2bd23cc2232982bc402088afaa3c55fff250bb8869D�2 � 33d81cf734e717eea6795c7c41a630b5e0eecbab4514f5859db6609e50ef0447D�1 � 6b0e694fe0bd25769497d03ebe96ad15e93d707736bcee6eb8e89bae4d0f77c1D�0 � e0d5c3c3503d52c16cbaa1ee54130af69d4b939561a49a2a1591e2049fd69279D�/ � 740cebdde7c6823d4f1beee23080215f1f12ef9577011c88461d3bf597d1931aD�. � bf23abfbb52f27d2a18450e2bbc48bb65f02cee123b849b8e4fb9c07a0e91259 W �� � W � ��C{�G .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��B{�} .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��A��A .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��@��) .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��G{�O /Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��F{�} .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��E��] .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Dw� .Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��K��A /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��J��) /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���I{�; /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���H{�7 /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��O��] /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Nw� /Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��M{�G /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��L{�} /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���R{�; 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���Q{�7 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��P{�} /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��V{�G 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��U{�} 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��T��A 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��S��) 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��Z{�A 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��Y{�} 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��X��] 0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Ww� 0Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��^��A 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��]��) 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���\{�; 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���[{�7 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��b��] 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��aw� 1Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��`{�G 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��_{�} 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��fw� 2Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��e{�G 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��d{�A 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��c{�} 1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��i{�A 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��h{�} 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��g��] 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���n{� 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��m{�] 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��l{�{ 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��k��A 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��j��' 2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��r{�} 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��q��] 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��pw� 3Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��o{�G 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��w{�] 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��v{�{ 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��u��A 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��t��' 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��s{�A 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��{{�A 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��z{�} 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��y��] 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���x{� 3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ��� {� 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�] 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��~{�{ 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��}��A 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��|��' 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�} 4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�] 4Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��{�A 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�} 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����] 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ��� {� 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+�� {�] 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{ 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����' 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;�� {�} 5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$�� m�] 5Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#����A 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����' 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�} 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��m�] 6Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{� 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�] 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{ 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��{�} 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V����' 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�} 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���{�5 6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$�� m�] 7Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510��� {� 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+�� {�] 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{ 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;�� {�} 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��"m�] 8Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���!{� 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422��� {�5 7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��#{�} 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 bR 0RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ā� Ł� Ɓ� ǁ� ȁ� Ɂ� ʁ� ˁ�# ́�' ́�+ �/ ρ�3 Ё�7 с�; ҁ�? ԁ�C Ձ�G ց�K ׁ�O �R ف�V ځ�Z ہ�^ ܁�b ݁�f ށ�i ߁�n �r ၴw ⁴{ ふ 䁵 偵 恵 灵 聵 遵 ꁵ 끵 쁵 큵 " # �' �+ �- �1 ���4 ���8 ���; ���> ���B ���E ���H ���L ���N ���Q ��T ��W ��Z ��] ��_ ��b ��d ��g ��i ��l ��n ��q ��t ��w ��z ��} �� �� �� �� �� �� �� �� �� �� �� �� !��# "��& $��* %��. &��4 '��9 (��> )��C +��G ,��L -��Q .��V /��] � � W � �4��'��c 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��&��] 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��%�� 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���${�5 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���+{� 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��*{�S 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��){� 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��(��9 8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��-{�} 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��,m�] 9Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��1��c 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��0��] 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��/�� 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���.{�5 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��4{�S 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��3{� 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��2��9 9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��8��c :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��7��] :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��6�� :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���5{�5 :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��;{�S :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��:{� :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��9��9 :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��>}� :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��=��] :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��<��G :Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 e �r+��V��: � � e D�G � ec4e31145b2bd5c37f07b12786ef3f1a7f747d2b7545a8f2deb7ca4a1dee6692D�F � 374186860ba10d433ef1b2fc521d6b97c48570d7340740cbe2e83f73df0b05e4D�E � a4b82389944cd83f755da0bd6b1b81d987f9dc5f28ee78bd23bde637a51321e2D�D � ab078229f1b5a4b3faba2b28785c5ddc0ff1118b1a2b3480dd2d824f7201a9ceD�C � 1b6f592d463f10e592cc2b035e409be816bd6dc189d7457574d5641fdcf767bcD�B � 22b2f7582ba663c4bb9f008bce4f7a80e69654b30b05c0571864b3b8292f8ff5D�A � dcd5ebbf96fa4b554ad2a5520ab76814b9eae044e649c9408139b2b07795d5f4D�@ � 1bb75937417ce4c985d73d9cf214bfece58dd2abdf6c21d4b1cb0108f070e2ffD�? � be203dd4714182fcfeef395bb57d7d5e9f418c603b87d6a5eb1ddb4db5253163D�> � 2141ba5b56fde898fffe70f5ebc0e8dd7ef3958b68e0cb81881c570fbfc2a0f2D�= � 8c2b3aa763d6d464e67be783b62d083cadc0aa9caf7fd24997ebcb514c44a4b2D�< � b322d84f1b35af3ca899bf943ee67782b8ae449a4769e0b3d0b7f455085b669cD�; � 6f4bf52463b1c528e35abf3e53489d86f0214da06151240744c0ab18b50ab903 � � W � �4��B��c ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��A��] ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��@�� ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���?{�5 ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��E{�S ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��D{� ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��C��9 ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��H}� ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��G��] ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��F��G ;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��L{� <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��K��9 <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��J��c <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��I��] <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��N��G <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��M{�S <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���Q}� <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��P}� <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��O��] <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��T��c =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��S��] =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��R{�E <Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��W{�S =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��V{� =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��U��9 =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��Z}� =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��Y��] =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��X��G =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��]{� >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��\{�E =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���[}� =Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��_��G >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��^{�S >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���b}� >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��a}� >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��`��] >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��d��W >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��c{�E >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��g{� ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���f{� >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��e��A >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��i��G ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��h{�S ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���l}� ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��k}� ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��j��] ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��n��W ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��m{�E ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT � �q��q��] @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192���p{� ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��o��A ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �r �_��t{�E @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���s}� @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��r}� @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 ! �%! ���w{� @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��v��A @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.��u��W @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,��z{�_ @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ���ym�A @Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��x{�U @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � �� � ���}}� AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��|}� AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��{��] AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.����W AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��~{�E AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��{�U AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���{� AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#�� ��A AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 �u �_��{�E BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182�,��{�_ AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ���m�A AJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ! �%! ���{� BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106�.����W BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 I � � I �,�� {�_ BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ��� m�A BJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'�� {�U BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ? 8=? �y��{�y BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v�� ��g BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C�� {� BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 i � i �.����W CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��{�E CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 ( XT ( �'��{�U CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229���{� CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#����A CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � �u� � �v����g CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��{� CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642�,��{�_ CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ���m�A CJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 � � ���{� DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�y��{�y CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966 I � � I �,�� {�_ DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd ���m�A DJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��{�U DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\�� }�= DAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y�� {�y DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v�� ��g DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C�� {� DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 � }� � ���#{� EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�&��"s�[ DAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��!s� DAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 I � � I �,��&{�_ EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1e)1A- Update to jdk-11.0.21+9 (GA) - Upd #���%m�A EJiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1e)1@- For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320�'��${�U EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1d�@- Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 ate release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 ^ 8=? ^ �\��*}�= EAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.eae�!@- Update to jdk-11.0.23+1 (EA) - Update release notes to 11.0.23+1 - Switch to EA mode - Speed up PPC build by removing ppc64le --with-jobs=1 workaround�y��){�y EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1e���- Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966�v��(��g EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.eae��- Update to jdk-11.0.22+6 (EA) - Update release notes to 11.0.22+6 - Switch to EA mode - Drop local copy of JDK-8312489 which is now included upstream - Resolves: RHEL-21031�C��'{� EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2e}�@- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk - Resolves: RHEL-19642 n }� � n � ��.� FSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��-�# FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665�&��,s�[ EAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2f"@- Fix 11.0.22 release date in NEWS - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds�~��+s� EAnton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1f@- Update to jdk-11.0.23+9 (GA) - Update release notes to 11.0.23+9 - Switch to GA mode for release - Require tzdata 2024a due to upstream inclusion of JDK-8322725 - Only require tzdata 2023d for now as 2024a is unavailable in buildroot - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. ** - Resolves: RHEL-30914 s ��O� � s ��4� FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��3s�5 FJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��2�{ FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��1y FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��0�c FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665z��/y FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665 / �< � / z��9y GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��8� GSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��7�# GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���6w�? FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��5w�! FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��>� GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��=s�5 GJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��<�{ GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��;y GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��:�c GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Cs�5 HJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��B�{ HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ay HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���@w�? GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��?w�! GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 e �r+��V��: � � e D�T � dd1acce44324d0f78c3fefe9d62e4f6b967b6a1f192ce18c8c0336a4c8adabd0D�S � d837edc3c03b3b3e816e3578cfb0fb39a5018c0d8b79486829a91303a31fba95D�R � 4159fb078456195a5426e0c1b4c344097b8cea15b93d89a5b0edec624c3dfabaD�Q � 81fe53c540c2219cdfff5019d61db2306219389015797fa7f76cb1b9d772482aD�P � a1ca7e4977e1aa55e582537db75040c395105cb35ed1d15da80d8a11e4a3f662D�O � 52427e37a69f9019c71338e82cb47b4093f49f6cbe7aaf6c7472b6ece216b3bdD�N � da6113b8e3f60613882eeec8c8497c068bd46559042351e5cf030ec9ad382d41D�M � d6beb9da905c4b24c2f8e52152046e20369cddd4a1f98e7babf6ac1658ced21bD�L � ac4c10593aace7feb58b42351306016a0668d518b590587b3be6a1fabb94aabfD�K � 1aed659e1e3bce0de9d3874074bcf4fc4df05a8018e054fdb5ac7209dd8ffad7D�J � e95162c5ce19bdda8897921e19c340bcc15ab18c2627b6d8915c79b8754c1505D�I � e601bbdfd361d5089be7cec55d69d6cc4b85d1c52963c2f8d004de14bd0ccde1D�H � 1ede1f94ef149ac05c9b87696792135237e12c4f7eb09ed33fcb232bee567817 � }-� � � ��Gw� HSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Fw�? HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ew�! HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��D� HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��L�{ IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ky IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��Jw�W HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Iw�E HSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Hi� HJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��Qw� ISeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Pw�? IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ow�! IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��N� IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ms�5 IJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 b &{ b �$��Vq�Y JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8R��@- Fix vlock doesn't perform PAM account management or credential reinitialization Resolves: #1032140l��Uqk JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-7Rz/@- Add PAM config for vlock Resolves: #1026819�&��Tw�W IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Sw�E ISeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Ri� IJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 P �]�J� � P ���]s�5 JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-15[qr�- Add man page for kbdinfo, link open man page to openvt man page Related: #949015�^��\s�K JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14[(�@- Replace CtrlL_Lock with Caps_Lock in generated us.map Resolves: #1441411 - Improve man pages and usage messages quality and consistency Resolves: #949015{��[s� JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-13X��@- Add compose rules to generated cz.map Resolves: #1181581n��Zsm JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-12W ��- Add eurlatgr console font Resolves: #1310286� ��Ys�G JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-11T$�- Include xkb layouts from xkeyboard-config converted to console keymaps Resolves: #1122058N��Xa? JDaniel Mach <dmach@redhat.com> - 1.15.5-10R�U�- Mass rebuild 2014-01-24M��W_? JDaniel Mach <dmach@redhat.com> - 1.15.5-9R�k�- Mass rebuild 2013-12-27 " p W� � " {��es� KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-13X��@- Add compose rules to generated cz.map Resolves: #1181581n��dsm KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-12W ��- Add eurlatgr console font Resolves: #1310286� ��cs�G KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-11T$�- Include xkb layouts from xkeyboard-config converted to console keymaps Resolves: #1122058N��ba? KDaniel Mach <dmach@redhat.com> - 1.15.5-10R�U�- Mass rebuild 2014-01-24M��a_? KDaniel Mach <dmach@redhat.com> - 1.15.5-9R�k�- Mass rebuild 2013-12-27�$��`q�Y KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8R��@- Fix vlock doesn't perform PAM account management or credential reinitialization Resolves: #1032140l��_qk KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-7Rz/@- Add PAM config for vlock Resolves: #1026819� ��^s�% JVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-16aw�- Fix vlock when console or terminal is closed abruptly Resolves: #1486233 9 ��� � � 9 N��la? LDaniel Mach <dmach@redhat.com> - 1.15.5-10R�U�- Mass rebuild 2014-01-24M��k_? LDaniel Mach <dmach@redhat.com> - 1.15.5-9R�k�- Mass rebuild 2013-12-27�$��jq�Y LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8R��@- Fix vlock doesn't perform PAM account management or credential reinitialization Resolves: #1032140l��iqk LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-7Rz/@- Add PAM config for vlock Resolves: #1026819� ��hs�% KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-16aw�- Fix vlock when console or terminal is closed abruptly Resolves: #1486233���gs�5 KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-15[qr�- Add man page for kbdinfo, link open man page to openvt man page Related: #949015�^��fs�K KVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14[(�@- Replace CtrlL_Lock with Caps_Lock in generated us.map Resolves: #1441411 - Improve man pages and usage messages quality and consistency Resolves: #949015 c _�n� � c � ��rs�% LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-16aw�- Fix vlock when console or terminal is closed abruptly Resolves: #1486233���qs�5 LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-15[qr�- Add man page for kbdinfo, link open man page to openvt man page Related: #949015�^��ps�K LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14[(�@- Replace CtrlL_Lock with Caps_Lock in generated us.map Resolves: #1441411 - Improve man pages and usage messages quality and consistency Resolves: #949015{��os� LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-13X��@- Add compose rules to generated cz.map Resolves: #1181581n��nsm LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-12W ��- Add eurlatgr console font Resolves: #1310286� ��ms�G LVitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-11T$�- Include xkb layouts from xkeyboard-config converted to console keymaps Resolves: #1122058 / ��&V � / ���xi�O MJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���wi� MJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��vi�/ MJan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���ug�A MJan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��tg�Q MJan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��sgY MJan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129 � NU�: � ^��}gY NJan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���|i� MJan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���{i�5 MJan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��zi� MJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��yi�s MJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���i�O NJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���i� NJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K�� i�/ NJan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���g�A NJan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��~g�Q NJan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��gY OJan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���i� NJan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���i�5 NJan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��i� NJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��i�s NJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ��� i�O OJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560��� i� OJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K�� i�/ OJan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441��� g�A OJan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��g�Q OJan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��gY PJan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���i� OJan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���i�5 OJan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��i� OJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-�� i�s OJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���i�O PJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���i� PJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��i�/ PJan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���g�A PJan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��g�Q PJan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��gY QJan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���i� PJan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���i�5 PJan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��i� PJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��i�s PJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ��� i�O QJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560��� i� QJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K�� i�/ QJan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441��� g�A QJan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[�� g�Q QJan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��%gY RJan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���$i� QJan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���#i�5 QJan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��"i� QJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��!i�s QJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���*i�O RJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���)i� RJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��(i�/ RJan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���'g�A RJan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��&g�Q RJan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��/gY SJan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���.i� RJan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���-i�5 RJan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��,i� RJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��+i�s RJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���4i�O SJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���3i� SJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��2i�/ SJan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���1g�A SJan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��0g�Q SJan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��9gY TJan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���8i� SJan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���7i�5 SJan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��6i� SJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��5i�s SJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���>i�O TJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���=i� TJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��<i�/ TJan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���;g�A TJan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��:g�Q TJan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��CgY UJan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���Bi� TJan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Ai�5 TJan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��@i� TJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��?i�s TJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 e �r+��V��: � � e D�a � 80196e9f5cfeb1b79fee9a0c7fdadd992ab7aa207db374333f67dbda5f2fd14eD�` � 6964dd0077dc7a05fc63ad2b2e02aecba267ac20fdf80589b768e01146960b74D�_ � 7b90cb8bc8d2c7faf537d5ae45a0a5a1723647451341f52d133cd54aed8e427cD�^ � 33f93263c696ee536e808126745c9fa540fc61ef70ce1cffc4848d598c98eae1D�] � 0c8cc9217954e5b7e4fba72b8cac347c473caf377f918d06fdc3c2bb7e672917D�\ � 8db5b248a66cb5ad1ed9c3264fe68eb2d2de4e9b3a5c7cc07f61bde703d26938D�[ � d4e1ed8394af297a574fede15b7e0b3dcc28d263998175257f45e728f22fca91D�Z � d1b44c5bcb094399e0bce41de4218e28b8f69fb0c0a79c24411b5561978ec6b5D�Y � c95477083d786f35fe049b4cf228df007b60410ff81fc37b0e6dd8bd2124cdccD�X � a3a9ea28c98e59589049fb7889c20c37771b190b44b92388c4e2aa7aafcb1a2eD�W � e940311272fea2057047e571496ef2c682d234a1b3e10e8c505258a1cc20ae6bD�V � b128da11799b79cddf1ef0419560127564929391ef662226704b79b39ab3bb98D�U � c4848c6ee81a224b1eb505bb2bf5a9c8572e930973b92319a6e17e294d14310b � ��1 � ���Hi�O UJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Gi� UJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��Fi�/ UJan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���Eg�A UJan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��Dg�Q UJan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��MgY VJan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���Li� UJan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Ki�5 UJan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Ji� UJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��Ii�s UJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���Ri�O VJan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Qi� VJan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��Pi�/ VJan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���Og�A VJan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��Ng�Q VJan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 . NU�: . ���W�� WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���Vi� VJan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Ui�5 VJan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Ti� VJan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��Si�s VJan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 7 ?� 7 �K��Z}� WJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��Y��e WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]�<��X��w WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��\��g WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��[��Q WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] I � � � �-��^��W WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��]�� WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} < �� < �K��a}� XJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� ��`��9 WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��_�� WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��c��g XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��b��Q XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] M � � � �-��e��W XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��d�� XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � ��g��9 XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��f�� XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 1� ���i��1 XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f R�J��h�� XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � < � �M��k�� YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?��j��{ XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � N � �L��m�� YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-��l��W YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � ���p��1 YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f V�J��o�� YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� ��n��9 YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] < < �?��q��{ YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d��r��E YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] p ,p �7��t��k YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��s�� YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} � � �P��v�� ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol [�^��u��9 ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��x��o ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ^�t��w��e ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command \ erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��z��7 ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han `�X��y��- ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��{��I ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��|�� ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��}��Y ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��~��] ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ 1��l 2��r 3��x 4��} 5�� 6�� 7�� 8�� 9�� :�� ;�� <��% =��* >��/ ?��4 @��9 A��> B��C D��H E��M F��R G��W H��Z J��\ K��^ L��a N��c O��e P��g Q��i S��k T��m U��p W��q X��r Y��t Z��v ]��x _��z a��{ b��| c��} d��~ f�� g�� h�� i�� j�� k�� l�� m�� o�� p�� q�� r�� t�� u�� v��! w��# y��& {��' |��( }��) ~��* ��+ ���- ���. ���0 ���2 ���4 ���7 ���9 ���; ���= ���@ ���B ���C ���E ���G ���I ���J ���K ���L ���M ���N ���P ���Q ���R ���S ���T ���U ���W ���Y ���Z ���[ ���\ ���] ���^ � � �d����E [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] o ,p o �|����u [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7����k [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O�� �� [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} Y �}����w [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B���� [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"����A [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] � � �?����{ [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4����e [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^����9 [Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} �X �B�� �� \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"�� ��A \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|�� ��u \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}�� ��w \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] � � � �4����e \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^�� ��9 \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b����A \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~����y \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} % n�% �"����A ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ����7 \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]����� \Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens n � � � �}����w ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B���� ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4����e ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^����9 ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b����A ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~����y ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} u n� u �"�� ��A ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�+�� � �M ]Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ����7 ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]����� ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens s � � � �}�� ��w ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B�� �� ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4��!��e ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^�� ��9 ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��#��A ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��"��y ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} n� �+��&� �M ^Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��%��7 ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���$�� ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens x dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��'��7 _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han z �f��(��I _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��)�� _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��*��Y _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��+��] _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��-�� _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ��^��,��7 _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��.�� _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���0��1 _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��/��# _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��2s� `Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��1s�# `Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��4s� `Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��3s�m `Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��7s�c `Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���6s�1 `Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���5s�7 `Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���9��+ `Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��8s� `Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��;s� aJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��^��:��9 `Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��=s� aJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��<s�m aJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��@s�c aJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���?s�1 aJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���>s�7 aJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���B��+ aAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��As� aJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��C��9 aAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��E��7 bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��D��? aAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} e �r+��V��: � � e D�n � e7f2bf03392856717c1588ee1a77010b1537d1a678ed7dd1dad5ad7391cd4147D�m � 82e182e512caa6c722313fe432c89e81a61b1c021c5fa0e223a163e77c95ce6eD�l � f8613e068693df3d5e08f956697ae0b595071f7b8c8bbed307faf9dbadef2a8aD�k � 53452ad31f9655e8f71a0b4c49b118b9337855433c50f25a9f5a75b92ebb8a8aD�j � 645ff71bbd0c6801049154ee1c5338517839d23b8146501039a0a919dd696e33D�i � a6fb96a295e675646b15c339c7b3d6070fefdec2a9d1b67402bcee35dc06bd72D�h � 93f5058bbfe57b3134debfc599214a91d401380ef38ec57336a0d995704d9c26D�g � f181f4bc3868b84eb350197aee4e79d0466d5aaac0e0a70a37eb58aa7533e228D�f � 91d2cf4d7a40fe66ba14583d4d5f045850fefc8b26b7e0adc2634f5ec9f9a775D�e � 3db35ae4792e6efe04cf89e50aeb71e9794589152c92cc1de54f2c92dc956b40D�d � 9f794072765d2423d8dc156f9a676c6e2b29c90d2a6f4e58cb579073b02c4017D�c � 996ee55268c9971d07d38c3217e0fb813a202d1b838963b6db16217069d193dbD�b � b8c980b0d2eaf56affe69fde8c004c91dde7d83277578de4cfc8c06aaa322858 RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��G�� bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��F�� bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[��I��1 bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��H��# bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��J��? bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��K��c bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��L�� bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��M�� bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���N�� bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[��P��1 cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��O��# cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��Q��? cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��R��c cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��S�� cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��T�� cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���U�� cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��W��Y cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��V��s cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��Y��1 dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��3��X��a cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��Z��? dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��[��c dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��\�� dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��]�� dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���^�� dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��`��Y dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��_��s dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��a��a dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��b��o dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��d��Y eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��c��s eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��e��a eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���g�� eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��f��o eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���i�� eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��h��{ eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��j��w eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���k��# eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��l�� eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���m�� fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��n��w fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���o��# fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��p�� fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���r��' fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��q�� fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��t��? fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���s��} fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���v��- fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��u��] fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���x��' gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��w�� gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��z��? gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���y��} gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��{��] gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��|�� gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���}�� gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_ gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���~��' gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � �����} hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� �� ��9 gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"����? hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1����] hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ���� hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ����� hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_ hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����' hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � �� ��9 hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"�� ��? hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ����9 hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � �� �� iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ��� �� iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_ iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��� ��' iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ����9 iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����? iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ����9 iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I���� iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � n n � ����9 jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i����Q iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ����9 jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����? jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I���� jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i����Q jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_����= jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7�� ��m jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!�� ��A jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7�� ��m jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] bR ARY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���a ���b ���d ���e ���g ���i ���j ���k ���l ���m ���n ���o ���p ���r ���t ���v ���x ���z ���{ �| Á�} ā� Ł� Ɓ� ǁ� ȁ� Ɂ� ʁ� ˁ� ́� ́� � ρ� Ё� ҁ� Ӂ� ԁ� Ձ� ׁ� � ف� ځ� ہ� ށ� ߁� �! ၹ" ⁹$ べ& 䁹) 遹, . �0 �4 �6 �7 �9 ���; ���= ���? ��A ��C ��D ��E ��F ��I ��J ��K ��L ��O ��P ��Q ��T ��U ��W ��Z ��\ ��` ��b ��c ��g ��h ��i ��k ��n #��q %��r &��t '��w -��y /��z 0��| 1�� 7�� 8�� 9�� ?�� @�� 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ��� �� kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i�� ��Q kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��!��= kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��"��m kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��$��A kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��#��m kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��&��_ kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���%��+ kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���)��+ lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��(��[ kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z��'��3 kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��,��[ lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z��+��3 lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��*��_ lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��.�� lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ���-��} lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���0�� lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��/��w lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���4s�1 mJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���3s�7 mJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��2��I lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��1�� lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��6s� mJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��5s�c mJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���7��+ mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��9�� mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^��8��9 mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��;��o mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t��:��e mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��=��[ nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��X��<��- mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��?�� nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ����>��} nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���A�� nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��@��w nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��C��I nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��B�� nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��D��7 nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT P P �+��E��U nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��F��% nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) e �r+��V��: � � e D�{ � dd8b1af64f49b071bf8395d452ac0dd4a5272f3de913475a6e1158eba0bcf9a0D�z � 4a74ed8e2ec25ff2f90a460ace450f1f5f9d8ec2388840ac54190eadc8a43575D�y � da8588048a3618261c5ce040bd0a4053c3a59f68de23dae234a757305ef02c43D�x � 9e3c7f90c42ce49e7b713d239d0814692a9206c40398c880f541a2a12d8aa210D�w � 6b93ef98f6a4d5466b5be6c353e9339237a7ee06b8879ce1e25290af5e63339cD�v � c9bd64813e41abf55c807e7a4e61c62906d1c51817c09e583a7b4306568104a8D�u � ea4070c75f7c99de5202445cbf44e188a168785685b3ee3a524f47abd2e476b2D�t � faf10a9ee4a6a84d4d3e47e83fc9b5e9820bc013e514a117737d79a517e0386aD�s � 10d9b8b27ee08f5090cf1a5d694548af27d8f6cdc826e69807773aeb28c9bd11D�r � f66887fb1f33b96e1102061d623623d7d06c2f8b951e00a16b5c6b4d260f7a75D�q � 2a53fc6879935314c27af738cec3350d3ceb42d0ac3d7163f52ab94febb50deaD�p � 6f164909e08bae70614e499ae419c8240f745a3e5a7212281901e38d69a975d4D�o � d407c748075b7355c9958eda5ff21771b816ee274b0d13adadeb34a3d3cb72ed � up � �%��I��I oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��H�� oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���G�� oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��J��7 oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT P P �+��K��U oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��L��% oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��O�� oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��N��I oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���M�� oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��P�� oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��Q��% pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��T�� pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��S��I pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���R�� pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��U�� pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��W�� pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���V�� pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��Z�� pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���Y��) pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���X��- pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��\�� qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���[�� qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��`��K qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��_�� qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���^��) qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���]��- qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���b��# qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��a��W qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��c��' qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for 3 ^O$ 3 �l��g��W rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��f��K rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��e�� rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��d��9 qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���h��# rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��i��' rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for G ^ G ���k��# rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��j��9 rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��n�� rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��m�� rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 �+��l��U rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 !CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 "] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���q��# sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��p��W sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��o��K sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��r��' sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for $ G ^ G ���t��# sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��s��9 sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��w�� sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��v�� sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 (�+��u��U sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} ) CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV *E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 +CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 ,] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���y��# tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��x�� sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��z��' tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for . G ^ G ���|��# tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��{��9 tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B���� tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��~�� tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 2�+��}��U tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} 3 CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV 4E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 5CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 6] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L�� �� tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U����) tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ���� uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 :����� tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV <E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 =CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 >] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L���� uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B���� uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U����) uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i����Q uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@�� �� uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7�� ��m uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc D��� ��1 uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L�� �� vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3�� ��e uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U����) vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i����Q vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@���� vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7����m vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc J�����1 vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_����= vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3 vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����e vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i����Q wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@���� wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7����m wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc O�����1 wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � �� ��7 wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_�� ��= wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]��� ��3 wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3�� ��e wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���!��1 xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]��� �� wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��%��= xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���$��3 xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��#��e xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��"��m xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc R � _TH � �<��)��w xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���(�� xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���'�� xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��&��7 xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � Hd � � ��,��7 yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��+��= yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3��*��e xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] ( ��( �<��/��w yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���.�� yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���-�� yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � H � �K��1}� yJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��0��e yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��3��g yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��2��Q yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] X �� ���6s� zJan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono \� ��5s�! zJan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean [�M��4�� yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} ]v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��8s� zJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check _�J��7s�# zJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��:s� zJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��9s�m zJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��=s�c zJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���<s�1 zJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���;s�7 zJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] h 5) h �<��@��w {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���?�� {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�F��>s� zJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � H � �K��B}� {Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��A��e {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��D��g {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��C��Q {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] d � � � �-��F��W {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��E�� {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} < �� < �K��I}� |Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� ��H��9 {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��G�� {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} e �r+��V��: � � e D� � af4714a643e3d4a5fe7d6877aeec7cfc2047da0866e0c7feb3defa34e1c54b14D� � 5bea05b28dab5f6e5c851855e06049b7d5dcb569c591a728efd7ea42b4a9ac8eD� � 33b524d6eec3fc82a17df2220b596193025c1faf20c5939c4271809681f95803D� � 62db43a91b2c1f3cd0407729f5c13f51ea098fea0aa9b90e2444d92166d1817dD� � bb9d06747ab519acfbcb5813fc1980b1af09ff804dab7cf685cf77230153ea1aD� � 95abbd8b6931c04aa8fdca6df2600bc37b23414c8395a75a4ef0a54d57357161D� � 804cbacad84b958748331da1bcd0479ae493f31fb8564a84104a6573e7aa7c81D� � 2f35a9c1bf11fa8350dfd2b02c990903292933bde6dd81da9a05921d0265d756D� � 085f001bc61a93bf23c68f240bd7b5c24aa41e4a9b6c5539dfe676b451ec102aD� � 18d2703d9432cd3d8353acf0fb1f852fe4c15301b3d49fffac3f0194c6a4aaa0D�~ � 7804215d9e8fd6eaae4ae7d7fb360dd0ec85e87ed93ec488ef3d1cb1285ff33eD�} � 8cdf3d0ccf31842dffcd39b5f3b05819fc442a375c03a3212e7b51db17f53e29D�| � 7d4cedf119f33ca8dc827b0f6f2be910119d492bf48ad4b4fd46ee45c6094800 - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��K��g |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��J��Q |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] i � � � �-��M��W |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��L�� |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � ��O��9 |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��N�� |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 1� ���Q��1 |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f n�J��P�� |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � < � �M��S�� }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?��R��{ |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � N � �L��U�� }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-��T��W }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � ���X��1 }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f r�J��W�� }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� ��V��9 }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] < < �?��Y��{ }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d��Z��E }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] p ,p �7��\��k }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��[�� }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} � � �P��^�� ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol w�^��]��9 ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��`��o ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow z�t��_��e ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command x erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��b��7 ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han |�X��a��- ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��c��I ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��d�� ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ B�� C�� E�� F�� G�� H�� I�� K�� L�� M�� N�� P�� Q��! S��% T��) U��, V��/ W��1 Y��3 Z��6 ^��8 `��: a��= b��@ c��B e��D f��F g��I j��K k��M l��O m��Q o��S p��U q��X s��Y t��Z u��\ v��^ y��` {��b }��c ~��d ���e ���f ���g ���j ���m ���p ���s ���t ���v ���x ���{ ���} ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���! ���# ���% ���' ���( ���) ���* ���+ ���, ���. ���/ ���0 ���1 ���2 ���3 ���5 ���7 ���8 ���9 ���: ���; ���< �> Á�? �o��e��Y ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��f��] ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] � � �d��g��E Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] o ,p o �|��j��u Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7��i��k Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��h�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} Y �}��m��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��l�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��k��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] � � �?��p��{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4��o��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��n��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} �X �B��s�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��r��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|��q��u �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}��t��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] � � � �4��v��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��u��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��x��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��w��y �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} % n�% �"��{��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ��z��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���y�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � � � � �}��}��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��|�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4����e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��~��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b����A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~�� ��y �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} n� �+��� �M �Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ����7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ����7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f����I �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o����Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q�� ��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R�� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ��^�� ��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O�� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � �����1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T�� ��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��s�# �Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 �����+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��^����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j�� s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��� s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��� s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ��� ��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F�� s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��!��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��#��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��"��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��%�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��$�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[��'��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��&��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��(��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��)��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��*�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��+�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���,�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[��.��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��-��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��/��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��0��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��1�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��2�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���3�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��5��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��4��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��7��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��3��6��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��8��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��9��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��:�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��;�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���<�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��>��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��=��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��?��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��@��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��B��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��A��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��C��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���E�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��D��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���G�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��F��{ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��H��w �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���I��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��J�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] e �r+��V��: � � e D� � b7d834f2cc5aa84ce95931ece2e31ba36b1622f5cf8408527a2a75727e975348D� � 572ff1fa3f621ad26e4183404533f0d373eee24c0a12955ab2ab39ca102d691eD� � fd8e59feae40f80e38ab4a8de84b96325cd6b29832ce967fca67cb83405b1342D� � de7f44e2c7986c23e352486d2894499d26f632330a153b346ea4363cdf0397cbD� � dc90a5cca940b1f478ed520e28cd82492738bbb49889b2cd96a4cff2fbc503bcD� � c540f6cbef4a78a050fb751882916735d1bd6054d8c177140c200cf31eaf923fD� � 563fbcd370477439a58af9940298f2c82a2b3a37e487abffaa7f2cc6dc359b31D� � adf17c4b2070f73fe44e9fc11648947e83c86d37a4e3532c9d77d3d8e9ae50e5D� � 179d7e14905a53e3d09515993644464c53e8bf4c10bcd829502d153744fdf666D� � a14db656a37e716de6fd51d331dc591f90b663382f88a483d40e8c847e506676D� � 2c64dd985521f02ada8ac0415b1d852ab79d87ebdf2950e421d8258a4d86d153D� � a5f9b329bc1130ffe9bf6f2ced3317e2ad895c4559a82bdf804c8b85e4765b28D� � 6ce4b480a292b7fa51c31777377a1711c2537597c5cf02d8aa14b345321b67bf t t ���K�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��L��w �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���M��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��N�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���P��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��O�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��R��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���Q��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���T��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��S��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���V��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��U�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��X��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���W��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��Y��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��Z�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���[�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��]��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���\��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���_��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��^��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��`��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��a��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��b�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���c�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��e��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���d��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��h��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��g��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��f��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��i�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���j�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��l��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���k��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��o��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��n��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��m��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��p�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���q�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � n n � ��s��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��r��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��u��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��t��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��v�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���w�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i��x��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��y��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��z��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��|��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��{��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���}�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i��~��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] bR ZRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ Ł�B Ɓ�C ǁ�E ȁ�G Ɂ�H ʁ�I ˁ�J ́�K �L ρ�M Ё�N ҁ�P Ӂ�R ԁ�T ց�V ׁ�X �Y ف�Z ځ�[ ہ�] ܁�_ ݁�` ށ�a ߁�b �c ၻe ⁻h ほi 䁻j 偻l 恻o 灻p 遻q ꁻs 끻u 쁻v w x �y �z �| �} ���~ ��� ��� ��� ��� ��� �� �� �� �� �� �� �� �� �� �� �� ��! ��" ��# ��$ ��' ��( ��) !��* "��- #��. $��/ %��2 &��3 '��5 (��8 )��: *��> +��@ -��A .��E /��F 1��G 2��I 3��L :��O <��P =��R >��U D��W F��X G��Z H��] N��^ O��_ P��a V��c W��d X��f Y��g � � �_����= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7�� ��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!����A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7����m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p����_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]�����+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� �����+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n����[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��Z����3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n�� ��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z�� ��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p����_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � �� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ��� ��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<�� ��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%����I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � �����+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol �^����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9����o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow �t����e �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n����[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �X����- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � �� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ��� ��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<�� ��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��!��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� �� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��"��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT P P �+��#��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��$��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��'��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��&�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���%�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��(��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT P P �+��)��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��*��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��-�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��,��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���+�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��.�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��/��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��2�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��1��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���0�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��3�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��5�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���4�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��8�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���7��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���6��- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��:�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���9�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��>��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��=�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���<��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���;��- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���@��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��?��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��A��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for , 3 ^O$ 3 �l��E��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��D��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��C�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��B��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���F��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��G��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for 0 G ^ G ���I��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��H��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��L�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��K�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 4�+��J��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} 5 CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV 6E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 7CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 8] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} e �r+��V��: � � e D�" � fe01de01f7bcb863a54f276394f9ab097a0d29db56661a42eb33d27e4bef27f8D�! � ea590d364a03624b219bdbcff4119983ab7a1bd31a6a7146afb0d4e684761056D� � 3fd85597715ed99be96dcdbcfa10bedfcca32a7ad600f9ebf609b83a2c6d481aD� � 83282159f5c6971ea89b738532ec3620b616c1b9d90ff2a62527714e210cad05D� � f2ec86971a1091e0bfe181b4363faea8e87a9b3e3559bb53f97966d8f02e97d2D� � a40e6f107134f5d7997968a9ddc2ce1e7beb8cec4d869d04add1181bbf1653fdD� � 380017b2933fbc2a789cf7c1b00bb0fa298bf6b9cb61d88aaf52bd314eaa1efcD� � 29653969b83d43fd83befb74a89b5811c1b7b3d613637aa64efa39a1d4b2e76aD� � 2ac60b8088805d258f480005417e5958a86da93d764c9825c111401402c2b72dD� � 76b71b906c9f1af8e7860bcf78af0d724ef72c918767fb655b3ac9f2e0e6530bD� � fe5bfef21df5d0e8252e7ac8804794d70a0db68230a14972077289f7d05e21e8D� � 38d054f054325006f87cc688b0f258c342122a6a0a76a8efb07f3c1ff8cd20dcD� � a15acb72ee6adfbf7ace3b47300fda1914cad9d22e255326e32d3a93ce032670 M ��M ���O��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��N��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��M��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��P��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for ; G ^ G ���R��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��Q��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��U�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��T�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ?�+��S��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} @ CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV AE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 BCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 C] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���W��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��V�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��X��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for E G ^ G ���Z��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��Y��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��]�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��\�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 I�+��[��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} J CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV KE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 LCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 M] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��^�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��_��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��a�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 Q���`�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} R CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV SE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 TCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 U] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��c�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��b�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��d��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��f��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���e�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��g�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��i��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc [���h��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��k�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��j��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��l��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��n��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���m�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��o�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��q��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc a���p��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��t��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���s��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��r��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��v��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���u�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��w�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��y��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc f���x��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��}��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��|��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���{��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��z��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W �����1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���~�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_����= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7�� ��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc i � _TH � �<����w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ����7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � Hd � � �� ��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_�� ��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3����e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] ( ��( �<�� ��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � H � �K��}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3����e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t����g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i����Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] o �� ���s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono s� ��s�! �Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean r�M���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} tv) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check v�J��s�# �Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] h 5) h �<�� ��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�F�� s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � H � �K�� }� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3�� ��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��"��g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��!��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] { � � � �-��$��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��#�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} < �� < �K��'}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� ��&��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��%�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��)��g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��(��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � �-��+��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��*�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � ��-��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��,�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 1� ���/��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ��J��.�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � < � �M��1�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?��0��{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � N � �L��3�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-��2��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � ���6��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ��J��5�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� ��4��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] < < �?��7��{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d��8��E �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] p ,p �7��:��k �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��9�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} � � �P��<�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^��;��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��>��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t��=��e �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��@��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han ��X��?��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��A��I �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��B�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��C��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��D��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ \��k ]��l ^��n _��o `��q b��t c��v d��w e��y g��} h�� j�� k�� l�� m�� n�� p�� q�� u�� w�� x�� y�� z�� |��" }��$ ~��' ���) ���+ ���- ���/ ���1 ���3 ���6 ���7 ���8 ���: ���< ���> ���@ ���A ���B ���C ���D ���E ���H ���K ���N ���Q ���R ���T ���V ���Y ���[ ���] ���_ ���b ���c ���d ���e ���f ���g ���i ���j ���l ���n ���p ���s ���u ���w ���y ���| ���~ ��� ��� ��� ��� � Á� ā� Ł� ǁ� ȁ� ʁ� ˁ� ́� ́� ρ� Ё� с� Ӂ� ԁ� Ձ� ց� � ف� ځ� ہ� ܁� � � �d��E��E �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] o ,p o �|��H��u �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7��G��k �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��F�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} Y �}��K��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��J�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��I��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] � � �?��N��{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4��M��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��L��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} e �r+��V��: � � e D�/ � 12eb69ce3ab02b67fd35247a607d73a70b5c657c3703598db21a9ebe26e45a42D�. � 39ce1d8d6ffa3efde898b475b2be150a92edca9d2aadf7ed8d5d69e6865175f9D�- � 22e7b5d6e46a23025f394d1dd9e25e4e5cfd1c5dbb00f74226f20929ee065bd9D�, � 1cd93bcccbab328b508e869ff3ceeaa30e1ab5ac781b7a6c3b91207832226025D�+ � 315bb4f6a8cd60a7becf60b599198a41a19465d28cc706d98dfa3b927f357dadD�* � 404156845f116a61c9627f44cc1b924461c60e723c92dd3a152f2840e6e9003aD�) � 8764032443efee4dc7bfb0ee1a11749205880cd86b230ad538346b697120c5e7D�( � b918eb715248bdb46d8f49387310a25030a9f4fe192d5ee0f69fabde9b84d42dD�' � 528d0642b5b6549b3084ad519bbeef6aa4048aa69d52903acce6a22132ac9303D�& � 97708bdbb05e028158319a2bcc0079feb219bc2cbe8d1b3c5b3861d43afd818fD�% � 3d08be30af99cb4e2248e149d75d36071c2dfd0806f511abe5c972b4051fe7d7D�$ � 4d66ddd3b79ce560d9eab146d518f751de7e9ef4d667fa701a868a978f1342cbD�# � 211028daa1af91e1fc841cb5b76e2f4edf63f510630571253c89635fccd41209 �X �B��Q�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��P��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|��O��u �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}��R��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] � � � �4��T��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��S��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��V��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��U��y �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} % n�% �"��Y��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ��X��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���W�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � � � � �}��[��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��Z�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4��]��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��\��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��_��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��^��y �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} n� �+��b� �M �Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��a��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���`�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��c��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f��d��I �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��e�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��f��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��g��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��i�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ��^��h��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��j�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���l��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��k��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��ns� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��ms�# �Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��ps� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��os�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��ss�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���rs�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���qs�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���u��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��ts� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��ws� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��^��v��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��ys� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��xs�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��|s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���{s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���zs�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���~��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��}s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^����7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!�� ��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[����1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T����# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b����? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J�� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[�� ��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ɅT�� ��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�� ��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ����� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/����Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|����s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[����1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ҃3����a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b����? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ����� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/�� ��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|����s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3�� ��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:�� ��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/�� ��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|�� ��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��!��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���#�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��"��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���%�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��$��{ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��&��w �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���'��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��(�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���)�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��*��w �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���+��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��,�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���.��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��-�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��0��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���/��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���2��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��1��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���4��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��3�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��6��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���5��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��7��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��8�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���9�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��;��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���:��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���=��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��<��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��>��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��?��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��@�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���A�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��C��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���B��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��F��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��E��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��D��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��G�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���H�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��J��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���I��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��M��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��L��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��K��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��N�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���O�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � n n � ��Q��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��P��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] e �r+��V��: � � e D�< � eeb0ed8d5fd30d98e3bef225ead945fafb2e3dbd8cea8e4b45565671473073d7D�; � 2111718d7572c52cddb1070151dd723808174e0f46528dd636ee9dd3afc41523D�: � fe35603b7abe8e1540b93b5c81f16503aa0704fb2bffed7d863b738cf0cf67b4D�9 � 3f9a0f21e2acc0ae5b83814ce830b1a500157b9c6b68efd957007ce368622288D�8 � 1b481cd6a6df8a141bc7064b72ffee022095969d0a25a8b9a57bfdc1ec3af7beD�7 � a895efeb08422b537678146fb9329ca6a9b3238f9291a15d091a5a70273cfab3D�6 � c6b55809244b010e1d1dc344b9add936f4598f2be100373d25749f6d2da8522dD�5 � dbbb88d9eb3b101dd3369a46793946b7cefc449cb1c00dab5affc0a3c6adfad7D�4 � 0a755493662be885a9d421b00ff08001a5d61a085bb86846d60072222530e672D�3 � 03c6e9f83275661d1eb892af76411bc871b3f442dc65c95ad96dadbaffe84cf7D�2 � aa2c7472ee44f9db48646789dbda352a7399c0d9f9e2644db03345bfbf705395D�1 � 6817bc65309730ab6a1f49ab977c2ea11a9cb5a2f623376008276eeda89f41daD�0 � 2e997f7e17c861373d0fa5737eaf371bb9187d5db73e8c89cb03ef342029cfaa � Y� � ��S��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��R��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��T�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���U�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 �i��V��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��W��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��X��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��Z��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��Y��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���[�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 �i��\��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��]��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��^��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] bR sRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ށ�# ߁�% �& ၾ' ⁾( ま) 䁾* 偾+ 恾, 聾. 遾0 ꁾ2 쁾4 큾6 7 8 �9 �; �= �> �? ���@ ���A ���C ���F ���G ���H ���J ���M ���N ���O ��Q ��S ��T ��U ��V ��W ��X ��Z ��[ ��\ ��] ��^ ��` ��b ��e ��h ��j ��l ��p ��r !��s "��u %��w '��y ,��{ .��} /�� 1�� 2�� 3�� 4�� 6�� 7�� 8�� 9�� :�� ;�� <�� =�� >�� ?�� @�� A�� B�� D�� E��# F��$ H��% I��' J��* P��- R��. S��0 T��3 Z��5 \��6 ]��8 ^��; d��< e��= f��? l��A m��B n��D o��E p��G r��I � �!��`��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��_��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��b��_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���a��+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���e��+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��d��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z��c��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��h��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z��g��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��f��_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��j�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ���i��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���l�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��k��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���ps�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���os�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��n��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��m�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��rs� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��qs�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���s��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��u�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol #�^��t��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��w��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow &�t��v��e �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command $ erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��y��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig (�X��x��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} )et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush *if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r +eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��{�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 -���z��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���}�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��|��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%����I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��~�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\�� ��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT 0 P P �+����U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S����% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%����I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\����7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT 5 P P �+����U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S����% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M�� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%�� ��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D�� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S�� ��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%����I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]�����) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]�����- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&�� ��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]�����) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]�����- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ��� ��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l�� ��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�� ��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for C 3 ^O$ 3 �l��#��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��"��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��!�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� �� ��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���$��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��%��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for G G ^ G ���'��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��&��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��*�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��)�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 K�+��(��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} L CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV ME-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 NCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 O] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���-��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��,��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��+��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��.��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for Q G ^ G ���0��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��/��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��3�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��2�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 U�+��1��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} V CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV WE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 XCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 Y] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���5��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��4�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��6��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for [ G ^ G ���8��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��7��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��;�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��:�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 _�+��9��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} ` CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV aE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 bCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 c] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��<�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��=��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��?�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 g���>�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} h CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV iE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 jCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 k] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��A�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��@�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��B��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��D��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���C�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��E�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��G��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc q���F��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��I�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��H��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��J��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��L��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���K�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��M�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��O��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc w���N��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��R��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���Q��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��P��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] e �r+��V��: � � e D�I � 6cfb6bf58c05c3d5623f5406c5e146a76aced8a97fef4153ef7d295cc5776298D�H � d093869ed5878283193de6a764e7847674976671131c829603d9981e56660bfbD�G � bf08078851ef715022279479446f3e390e30bd92cb15b2aed42318fb677e40a0D�F � aed30d0de3bf0d71c9c9be43e3e4b5e8d6832a7e755e8cfd843a6bd7f735d310D�E � cfde4230671763bf6a464de9ec8c191195c9ae864571afd92bc7bea8dfcbb11eD�D � e3d2e5a0802cde0d09552d1bd3102383e1851a9aecf88fd83a5fb81baae6d53cD�C � e357af06726c5602fad5542ef0502f94391737c732c9fbf6706f80fb6757f197D�B � 0eec836c027a565c281645294b192571bfe852631d94438627371cba58c380deD�A � 7eee4abf22678a8043377d3ff29621b20a1dbe6da04bb0918068ef07eacf23e7D�@ � ef3258341d0c757014a17a4cc94207f623282b6190b470f1517c29d8bb42218fD�? � a663038e5d2fe0f26775744ace593a48c274a77a69c51d4592701ea604272ae1D�> � 610253d61d946788184230adb18227e8e92b245a2c2244a5d929b1b096fe7faaD�= � 3668549b1c43bc2b0dd420108f4ebcc8bff57ef08d4b839f3f8e6f9c4691f314 � � � �i��T��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���S�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��U�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��W��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc }���V��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��[��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��Z��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���Y��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��X��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���]��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���\�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��a��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���`��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��_��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��^��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��e��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���d�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���c�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��b��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � Hd � � ��h��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��g��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3��f��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] ( ��( �<��k��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���j�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���i�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � H � �K��m}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��l��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��o��g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��n��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � �� ���rs� �Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono �� ��qs�! �Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ��M��p�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��ts� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��ss�# �Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��vs� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��us�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��ys�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���xs�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���ws�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] h 5) h �<��|��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���{�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�F��zs� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � H � �K��~}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��}��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t�� ��g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i����Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-����W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} < �� < �K��}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� ����9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t����g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i����Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-�� ��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � �� ��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L�� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 1� ��� ��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ��J�� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � < � �M���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?����{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � N � �L���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-����W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � �����1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ��J���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� ����9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] < < �?����{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d����E �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] p ,p �7����k �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} � � �P���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9�� ��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t����e �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � �� ��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han ��X�� ��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f�� ��I �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � �� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��!��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��"��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] � � �d��#��E �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] o ,p o �|��&��u �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7��%��k �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��$�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ t��L u��M v��O x��R z��T {��U |��W ~��[ ��] ���a ���e ���h ���k ���m ���o ���r ���t ���v ���y ���| ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���! ���" ���# ���& ���) ���, ���/ ���0 ���2 ���4 ���7 ���9 ���; ���= ���@ ���A ���B ���C �D Á�E ā�G Ɓ�H ǁ�J ȁ�L ʁ�N ˁ�Q ́�S ́�U Ё�W с�Z ҁ�\ Ӂ�] ԁ�_ ց�a ׁ�c ف�d ځ�e ہ�f ܁�g ށ�h ߁�j �k �l �m �n �o �q �s �t �u �v �w �x �z �{ �| �~ � ��� Y �}��)��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��(�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��'��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] � � �?��,��{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4��+��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��*��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} �X �B��/�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��.��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|��-��u �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}��0��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] � � � �4��2��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��1��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��4��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��3��y �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} % n�% �"��7��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ��6��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���5�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � � � � �}��9��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��8�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4��;��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��:��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��=��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��<��y �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} n� �+��@� �M �Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��?��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���>�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��A��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f��B��I �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��C�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��D��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��E��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��G�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ń^��F��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��H�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���J��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��I��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��Ls� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ɆJ��Ks�# �Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Ns� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Ms�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Qs�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Ps�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Os�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���S��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��Rs� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��Us� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check υ^��T��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] e �r+��V��: � � e D�V � 66af09f68408482637e668b90619392a27fa21b7d4ed06f3c3cbc60d87ce1d78D�U � c9c2a62c7fb170cc9007afb571d8b9beab632b42aaef2f1461f8ba0a2c5f6d9aD�T � 619978f4cd3319fc56335a010d227ac9446de3fe27758ad4f22319183b1a35bbD�S � e1d60b061557e368c20da15e4517376a49df65648636bd09fa3baa81f162391dD�R � 2c612e423c3e3ace2108965f2996ecb1002eee8415cdce8e05c58aafa5f37306D�Q � f066c4d77c32004d1843615beab2f59dce9664e5e79aaf6f5453d44d0d9e02feD�P � 72dc266e5da09e38d19f4c3904bdb983146af68adbe466120ff8bfecdb4567bfD�O � 5ec120d1c66453ab1a85e5107b0b4457686f595cf2e8dfc5ca04adcec4f0ade0D�N � 7d9fd10906d65ff1e5f7dc8aed453f9fa04ddb34ca3a6622b45b15bbf2b7dc66D�M � ea73cbefe91a8c86fea9a227d19b9f36d68daa5f9e640d6d6acf7a6ad65c4297D�L � e2b80fc90e80e10166a785ab1c718ed12380055d955ab295c5363ad6405fe815D�K � 3f77e8c91079e010fb161e28eaf613452e1c25d2d67b0367cb344f3141bf3cb9D�J � 1a74fcb33103de74d5129a6eea3fe37137b7cbdc136b11a49f79822b8fbd6194 to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Ws� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Vs�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Zs�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Ys�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Xs�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���\��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��[s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��]��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��_��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��^��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��a�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��`�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[��c��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 T��b��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��d��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��e��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��f�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��g�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���h�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[��j��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T��i��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��k��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��l��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��m�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��n�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���o�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��q��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��p��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��s��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �3��r��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��t��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��u��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��v�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��w�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���x�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��z��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��y��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��{��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��|��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��~��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��}��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3����a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ����� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:�� ��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ����� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@����{ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>����w �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � �����# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ����� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>����w �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ��� ��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M�� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ��� ��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H�� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"����? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]��� ��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , �����- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1����] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + �����' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP S z S �"����? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]�����} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1����] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ����� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � �����} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"�� ��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1�� ��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � �� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ��� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��!��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��� ��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��$��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��#��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��"��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��%�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���&�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��(��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���'��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��+��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��*��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��)��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��,�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���-�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 n n � ��/��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��.��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��1��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��0��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��2�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���3�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 �i��4��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��5��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��6��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��8��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��7��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���9�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 �i��:��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��;��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��<��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��>��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��=��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��@��_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���?��+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��� ��� ��� ��� ��� ��� ��� ��� �� �� �� �� �� �� �� �� �� �� �� �� �� ��! ��$ ��% ��& ��( ��+ ��, ��- ��/ ��1 ��2 ��3 ��4 ��5 ��6 ��8 !��9 "��: #��; $��< %��> &��@ (��C -��F 2��H 4��J 5��N 6��P 7��Q 8��S ;��U =��W C��Y E��[ F��] H��^ I��_ J��` K��c M��d N��e O��f P��i Q��j R��k S��n T��o U��q V��t W��v X��z Y��| [��} \�� ]�� _�� `�� a�� g�� i�� j�� k�� q�� s�� t�� u�� {�� |�� }�� ��� ��� ���" ���# ���% ���' ���( ���* !� ���C��+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��B��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig )�Z��A��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] *et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush +if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r ,eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��F��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig .�Z��E��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��D��_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] /et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush 0if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r 1eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��H�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 3���G��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���J�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��I��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���Ns�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Ms�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��L��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��K�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��Ps� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��Os�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���Q��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��S�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol 9�^��R��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��U��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow <�t��T��e �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command : erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��W��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ?�X��V��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} e �r+��V��: � � e D�c � 8c51f1c38ad47d554e10f738e37c0bf122f76f4859f755e0449895448111fdfbD�b � 618bc94e003b50654a567449109303c221bd56c7f188de529a8d1ab1d8e20fd8D�a � 90add33a3f4cc834b9be91c4ccc12114abeee16aab262829030db0c9ce27fafeD�` � 61cfa80ff521cdee2ca184780c2e8e55454cba77894c18944b233eb145b6c262D�_ � 8cd2d58f528256baddd73bebea799773f83bd54624d090696d0c2ca0cac8656dD�^ � 9c8552ce4b79fef3a8e7b55a85b91bd83e2f2765635056bc7064ab7d071c6e1aD�] � f5394565fcf1a20382bcdd1f64e77e587e222a4e135860c31a6a2b4f012e4691D�\ � f0308f6cab8d1b2a831f455e5c9950062be00908841b0a04d0555377c61e49caD�[ � c4dd18d9c01ea40a453a4a345bdb13d9ca5f3315e69e78ce7e1f9798972a5d47D�Z � a219dbccfdca9ac57c9b9064dffadc0044870709a425252ba874f86cfa15084cD�Y � bae6332ef212f5e4fe0b1eada2f87ebde9f8d0ae3bc2bf1231463bddc7837af2D�X � 5b152b26c3cb00751f5faf6a0e5bf8cffab7cb953c9a7a44d5c064beadb2c64bD�W � 5b75d2143ffe291c5183924ee30ab08ceb34c6da47f540b55f39025c5123e419 @et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush Aif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r Beform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��Y�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 D���X��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���[�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��Z��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��]��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��\�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��^��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT G P P �+��_��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��`��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��c��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��b�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���a�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��d��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT L P P �+��e��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��f��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��i�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��h��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���g�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��j�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��k��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��n�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��m��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���l�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��o�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��q�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���p�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��t�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���s��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���r��- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��v�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���u�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��z��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��y�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���x��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���w��- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���|��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��{��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��}��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for Z 3 ^O$ 3 �l����W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&�� ��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��~��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i �����# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T����' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for ^ G ^ G �����# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ����9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 b�+����U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} c CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV dE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 eCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 f] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ��� ��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l�� ��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&�� ��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�� ��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for h G ^ G �����# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �� ��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 l�+����U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} m CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV nE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 oCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 p] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � �����# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T����' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for r G ^ G �����# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ����9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 v�+����U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} w CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV xE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 yCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 z] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U����) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � �� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ~��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L�� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B�� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U�� ��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��"��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���!�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��#�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��%��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����$��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��'�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��&��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��(��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��*��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���)�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��+�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��-��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����,��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��0��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���/��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��.��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��2��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���1�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��3�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��5��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����4��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��9��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��8��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���7��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��6��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���;��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���:�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��?��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���>��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��=��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��<��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��C��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���B�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���A�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��@��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � Hd � � ��F��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��E��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3��D��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] ( ��( �<��I��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���H�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���G�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � H � �K��K}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��J��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��M��g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��L��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � �� ���Ps� �Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono �� ��Os�! �Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ��M��N�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��Rs� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��Qs�# �Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Ts� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Ss�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Ws�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Vs�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Us�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] h 5) h �<��Z��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���Y�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�F��Xs� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] e �r+��V��: � � e D�p � ad7bce9b915192b7b549afd2ed6063d2ada93cb004d25d42dc82dd3313d82a37D�o � 52fc84afa30b500c79c2116a67a199c3eba6bbed1b7b171fc4fec483dc2c9f4cD�n � 4abf0ebc2127e7a5b5dfb595fa447cb44f339ff023ce88bb0a97992bba4cd3a9D�m � 961c48cd798bb2acb18bcb4bd7ebd24f8752f021a87363745131dc5e83535165D�l � cd7d87fbf38e3d491a5a8b262d70dddd01ac00ec722b52c01b44e67f7d8c5a66D�k � e7e90b3e6ae85deb749d4071a5467a5a718a12808213ecd6657a9d70d12129ceD�j � b1985dc9a05a3ffe2eac12dd0ba63fc7285e6ca29af03c0351ff2b6bcbd39822D�i � c20dbccc7c4cc73173c89b3632eb2dbf33e22faaaf1b317279ecad8e2b1fe49bD�h � 74dfc146e5e4ab219dba838033e3a2a983e2ad796cee5a175fda1b6c17653193D�g � c59ce9d5e2b28c278b947391fce0c591d912b04727d6141c27262cf98fb99844D�f � a2341873756b6756d7b18967c3dd2b6ce12fff550f0837ea9361171291c42397D�e � c4bc426d70f27932111cdba1edd2eb69526aef608fccde2da51a6282a479270cD�d � 6cf85cafbf0ed8b58696a680262f819d5ebbe64f5d4ce8010a037a47a9f1ae9f � H � �K��\}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��[��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��^��g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��]��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-��`��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��_�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} < �� < �K��c}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� ��b��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��a�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��e��g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��d��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-��g��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��f�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � ��i��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��h�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 1� ���k��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ��J��j�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � < � �M��m�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?��l��{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � N � �L��o�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-��n��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � ���r��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ��J��q�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� ��p��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] < < �?��s��{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d��t��E �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] p ,p �7��v��k �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��u�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} � � �P��x�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^��w��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��z��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t��y��e �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��|��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han ��X��{��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��}��I �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��~�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o����Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q�� ��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] � � �d����E �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] o ,p o �|����u �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7����k �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} Y �}����w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"����A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] � � �?�� ��{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4�� ��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^����9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���- ���0 ���2 ���3 ���5 ���9 ���; ���? ���C ���F ���I ���K ���M ���P ���R ���T ���W ���Z ���\ ���^ ���` ���c ���e ���g ���i ���k ���m ���o ���r ���s ���t ���v ���x ���z ���| ���} �~ Á� ā� Ł� Ɓ� ǁ� ȁ� ʁ� ˁ� ́� ́� ρ� Ё� с� ҁ� ԁ� ց� ׁ� �! ف�" ځ�# ہ�% ݁�& ށ�( ߁�* ��, ��/ ��1 ��3 ��5 ��8 ��: ��; ��= ��? ��A ��B ��C ��D ��E ��F ���H ���I ���J ���K ���L ���M ���O ���Q ��R ��S ��T ��U ��V ��X ��Y ��Z ��\ ��] ��_ ��a ��b �X �B�� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"�� ��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|�� ��u �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}����w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] � � � �4����e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^����9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b����A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~����y �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} % n�% �"����A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ����7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � � � � �}����w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4����e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^����9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b����A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~����y �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} n� �+�� � �M �Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� �� ��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � �� ��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f�� ��I �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��!�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��"��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��#��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��%�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ܄^��$��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��&�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���(��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��'��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��*s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �J��)s�# �Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��,s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��+s�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��/s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���.s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���-s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���1��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��0s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��3s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �^��2��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��5s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��4s�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��8s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���7s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���6s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���:��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��9s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��;��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��=��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��<��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��?�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��>�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[��A��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T��@��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��B��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��C��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��D�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��E�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���F�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[��H��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��G��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��I��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��J��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��K�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��L�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���M�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��O��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��N��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��Q��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��3��P��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��R��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��S��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��T�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��U�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���V�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend K K �/��X��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��W��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��Y��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��Z��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] e �r+��V��: � � e D�} � d41b5d8b6192712bf36a8ca2a106db94ce0b4451ac3b212fd91ab7cb0ed75e82D�| � 9b3822948ac2fa18132b7f9d9a7d2a194615f396f5dc14dd0ecaa0ee2975470eD�{ � 6ba3e0dd497e559f7b44eabac8136c12499febdb7526dbf3ba89a7b3627aed84D�z � 376c21e2589fa7b033d3dbd7673defdb1d5e23c6ad32b112bddd31ae3915a582D�y � 17401dca64ff03c547fb51c7e83d60963cc03409dbba4804272853959d2b9a21D�x � 7e0b3e536d03b5890007813734653bd6fbc40e2af79d298e9448d84e81ea4734D�w � d2642493abe4c602af8bd00a8d0954219b93cb84fabd9870230cad39d45b9ee7D�v � b31602d66dc65e0bd7a5dac4f9770030528982795cfb1eb49b0cc1eea4786f27D�u � 3398d3a8a0f8d7273ef408e2922e3b985aab4a0398a30203ce247637331432d5D�t � 07505d8e7877d8a5114d6db605a9dc9c2132c0d32d978e2df599fa2e69887780D�s � e888a6e4abc3928d95ec0b18f8a42febb63ba70ba0371c23615b8823209d9317D�r � ba5a53ea9bd2aff2765fd9fc38a3f75ecd5d3e617e1c2cb85f6a9a793063506cD�q � 506818895cd30b93e3417b8379f3afc7f80a2a69c7739886bc58648f153fb9e6 K K �/��\��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��[��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��]��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���_�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��^��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���a�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��`��{ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��b��w �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���c��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��d�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���e�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��f��w �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���g��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��h�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���j��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��i�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP S z S �"��l��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���k��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���n��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��m��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���p��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��o�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP S z S �"��r��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���q��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��s��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��t�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���u�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��w��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���v��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���y��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��x��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��z��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��{��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��|�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���}�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���~��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� �� ��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ����� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � �� ��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I�� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 , n n � �� ��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i�� ��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 1 �i����Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_����= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7����m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!����A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7����m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 7 �i����Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_����= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7����m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!�� ��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7����m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p�� ��_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]��� ��+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���!��+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n�� ��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ?�Z�� ��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] @et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush Aif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r Beform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��$��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig E�Z��#��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��"��_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��d ��e ��f ��g ��h ��j ��l ��n ��p ��r ��s ��t ��u ��w ��y !��z "��{ #��| $��} %�� &�� '�� (�� )�� *�� +�� -�� .�� /�� 0�� 2�� 3�� 4�� 5�� 6�� 8�� 9�� :�� ;�� <�� =�� >��! C��$ I��& K��( L��, M��. N��/ O��1 R��3 T��5 Y��7 [��9 \��; ^��< _��= `��> a��A c��B d��C e��D f��G g��H h��I i��L j��M k��O l��R m��T n��X o��Z q��[ r��_ t��` v��a w��c x��f ~��i ���j ���l ���o ���q ���r ���t ���w ���x ���y ���{ ���} ���~ ��� ��� ��� ��� ��� ��� ��� ��� Fet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush Gif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r Heform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��&�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 J���%��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���(�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��'��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���,s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���+s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��*��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��)�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��.s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��-s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���/��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��1�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol P�^��0��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��3��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow S�t��2��e �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command Q erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��5��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig U�X��4��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} Vet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush Wif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r Xeform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��7�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 Z���6��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���9�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��8��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��;��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��:�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��<��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT ] P P �+��=��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��>��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��A��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��@�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���?�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��B��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT b P P �+��C��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��D��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��G�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��F��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���E�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��H�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��I��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��L�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��K��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���J�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��M�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��O�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���N�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��R�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���Q��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���P��- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��T�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���S�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��X��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��W�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���V��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���U��- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���Z��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��Y��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��[��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for p 3 ^O$ 3 �l��_��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��^��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��]�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��\��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] e �r+��V��: � � e D� � 81b2e85bd83c8dc868290121adb4b8821c2da304dd04a69ec5ea65031c46d351D� � 2041fb62286ddc1875cdc0396db816edd188bd1beeb362b3e99a3166a7bf8179D� � d209fc6a50302b35ffe0a948bce5c2b144f66af599a404ffd4a6771e24896130D� � ab17047e6cd355e0a693ee5bd8cca6e51616257233f9e4991c609933559e5831D� � 361435b0149d64bce7ddd96522893346319af483ba71ff2f7d32c353614b224fD� � 4b1e28830cdeb09548b5fed9c3021450437dcf28952e709628dd86397bf78af4D� � 95328dc6ff974a63f71a020d2f75e367ec10635e3db3ece1c6894c07d22f40cdD� � 73b613dd48f531b02ef3e8b042c6bb5fa7f517faeedbd0883ebda2f46aca3135D� � 2a085ac87e43c3c43e031cb33170bfabf4fbeea917c6492d513aab56393104b5D� � e73e80ff6eb4ad13c6cbb061fbc0b000631cf8e49449db648db76556adee995eD� � 5cf93be19fa91922ddc7ba9806b15e6fe9b422f89ed4b63465373a0a29b17e95D� � 39d478d2186cad86df1a7e0bcfb9ec33d5205653c9b51f111a67f541511da671D�~ � 89fc26f9b9704d242bcd1974e846283609f11bf4dc47d614efae548b2b836ec9 i i ���`��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��a��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for u G ^ G ���c��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��b��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��f�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��e�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 y�+��d��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} z CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV {E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 |CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 }] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���i��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��h��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��g��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��j��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for G ^ G ���l��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��k��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��o�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��n�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��m��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���q��# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��p�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��r��' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���t��# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��s��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��w�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��v�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��u��U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��x�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��y��) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��{�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ����z�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��}�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��|�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��~��) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i�� ��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7����m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ������1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3����e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U����) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i����Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@�� �� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7�� ��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ���� ��1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_����= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]��� ��3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3�� ��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i����Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7����m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ������1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ����7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_����= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W �����1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_�� ��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]��� ��3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7����m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��!��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}��� �� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]��� �� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� �� ��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � Hd � � ��$��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��#��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3��"��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] ( ��( �<��'��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���&�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���%�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � H � �K��)}� Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��(��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��+��g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��*��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � �� ���.s� Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono �� ��-s�! Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ��M��,�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��0s� Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��/s�# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��2s� Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��1s�m Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��5s�c Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���4s�1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���3s�7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] h 5) h �<��8��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���7�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�F��6s� Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � H � �K��:}� Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��9��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��<��g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��;��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-��>��W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��=�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} < �� < �K��A}� Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� ��@��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��?�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��C��g Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��B��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-��E��W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��D�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � ��G��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��F�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 1� ���I��1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ȃJ��H�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � < � �M��K�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?��J��{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � N � �L��M�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-��L��W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � ���P��1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ̃J��O�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� ��N��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] < < �?��Q��{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d��R��E Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] p ,p �7��T��k Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��S�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} � � �P��V�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol х^��U��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��X��o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ԉt��W��e Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��Z��7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han քX��Y��- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��[��I Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��\�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��]��Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��^��] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] e �r+��V��: � � e D� � d79bdff199cc5f9127f01f99ca4906b965b3c5fb198906c1ed16e725d5bbe25fD� � 5573691deaca712e1478b3d889fe322be138680d8955a04b75e3a0066e099ca2D� � 28f85ca5b6e7c2b1e3ab7c4b31675583e8a72c18188f86f288a9a9bc046a202cD� � d561b43042ddb9d02a31ae81d1c4935a05988542719e259b277dfcc2995339cfD� � 4f26a49ed12aa41e17cd5c146486cc8db5796101704d7b492066007312935250D� � cda402fcb291052201381d37c733af954d30e2e6e3f24e5b636ae67715e8c0d0D� � 29feb5e5f9922979d66fabe2aac8bd7fdd18f1915777acf5b360bb7e5cdb0109D� � 4eb98f8f58cf6cec17799f6df6cd52b55de57ac3aef90f330df1e07c1f8f3702D� � 82269d23d95a9f1e1e213464701f07feb1fb5233bc66364a7b39d1a25b4a7a72D� � 4684e767f94d3dbc6eaccc3037287d441ff4f9d0bda6586211a7181edd68f6a8D� � 289a95c54f089f8ce63931c0b1b113b2e0f6b74f859eb3900ce19534baafd6d4D� � 16a9d3e7ce759abfcc7721bbe369b46acd4b3c511910e0ac4f61445d857f52d8D� � b5a460913216927a863650ccef6d332b05a92836c9647e73a369720e9156fe84 � � �d��_��E Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] o ,p o �|��b��u Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7��a��k Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��`�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} Y �}��e��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��d�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��c��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] � � �?��h��{ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4��g��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��f��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} �X �B��k�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��j��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|��i��u Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}��l��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] bR 'RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��� ��� ��� ��� ��� ��� ���! ���$ ���' ���) ���+ ���. ���0 ���2 ���5 ���8 ���: ���< ���> �A ā�C Ł�E Ɓ�G ǁ�I Ɂ�K ʁ�M ˁ�P ́�Q �R ρ�T Ё�V Ӂ�X Ձ�Z ׁ�[ �\ ف�] ځ�^ ܁�_ ݁�b ށ�e ߁�h ��k ��l ��n ��p ��s ��u ��w ��y ��| ��} ��~ �� �� �� �� �� ��� ��� ��� ��� ��� ��� ��� ��� ��� �� �� �� �� �� ��! ��" ��# ��$ ��& ��' ��( ��) ��* ��+ ��- ��/ ��0 ��1 ��2 ��3 ��4 ��6 ��7 ��8 ��: !��; "��= #��? $��@ %��A &��B � � � �4��n��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��m��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��p��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��o��y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} % n�% �"��s��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ��r��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���q�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � � � � �}��u��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��t�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4��w��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��v��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��y��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��x��y Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} n� �+��|� �M Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��{��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���z�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��}��7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f��~��I Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ���� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o�� ��Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q����] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R���� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE �^����7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O���� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � �����1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T����# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��s� Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��s�# Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D�� s� Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o�� s�m Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j�� s�c Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��� s�1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��� s�7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 �����+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��s� Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��s� Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��^����9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s� Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�c Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���s�1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 �����+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��s� Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^����9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^����7 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!����? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O�� �� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R�� �� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ? ' ? �[�� ��1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T�� ��# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�� ��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��!��c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��"�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��#�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���$�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend ? ' ? �[��&��1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T��%��# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��'��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��(��c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��)�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��*�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���+�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend K K �/��-��Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��,��s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��/��1 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �3��.��a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��0��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��1��c Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��2�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��3�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���4�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend K K �/��6��Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��5��s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��7��a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��8��o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��:��Y Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��9��s Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��;��a Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���=�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��<��o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���?�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��>��{ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��@��w Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���A��# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��B�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���C�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��D��w Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���E��# Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��F�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���H��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��G�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP + S z S �"��J��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���I��} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���L��- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��K��] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���N��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��M�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP / S z S �"��P��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���O��} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��Q��] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��R�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���S�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��U��_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���T��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���W��} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��V��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��X��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��Y��] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��Z�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���[�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��]��_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���\��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��`��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��_��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��^��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] e �r+��V��: � � e D�$ � 53cc61153b028eb77eee99eb4b318593a92007ff036a6f6a823411e1ac986690D�# � 51f9017134f88118879ffbdb248450e3b3d9099bcd70dd6c20b9044df41ebaadD�" � 6f9c2eab5630c71a827f71ce416ea6cd0c6b2aba734a2d023f35f7af3d415da4D�! � f7f4d9e5559f8b130d55ce0048a0976d08ca48b1e818df7319c89d168e26c14eD� � 0b31fcea001c43db8cd9d635933b11a63756f99e56b454bbfd3b201a1ec4a077D� � 8a6c2691d1645347df9eff452b78fb18042623b1204c96aafae8161528c51327D� � 3ad9c854816cd51073279e25d66deb06e14c0f98f40cc6d468a2d1aee2d2c284D� � 34d206ee003d27edc3b435c9aecc9569a8efa0cebca782b60e595b2c78f06326D� � f6c9684def9cd5c7f66fcd886ee8773d2b2f5ae9bdb6dfb6f71d2377b140d30dD� � dc83e35a513a39a6511e6815dff7c318849b1e9ec3399ac8de14115dd8663f84D� � a80e94c28a71146376496e2e9902a431fca968386feb3bcfc1a8b876f55f48ceD� � bf636c3d1c7371276e6fcf8c17bb54ad4a7b3adb5b7ac282711c4d8559a5996bD� � 6a841f73df251cdd51f2173820d7aefd9cdad93e87f34531d4856379e80aebfc � � � ��a�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���b�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��d��_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���c��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��g��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��f��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��e��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��h�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���i�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 C n n � ��k��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��j��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��m��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��l��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��n�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���o�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 H �i��p��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��q��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��r��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��t��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��s��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���u�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 N �i��v��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��w��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��x��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��z��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��y��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��|��_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���{��+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� �����+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��~��[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig V�Z��}��3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] Wet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush Xif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r Yeform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n����[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig [�Z����3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p�� ��_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] \et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush ]if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r ^eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 `�����} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<����w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ (��D )��E *��F ,��H -��J .��L 0��N 1��P 2��Q 3��R 4��S 5��U 6��W 7��X 8��Y 9��Z :��[ ;��] <��` >��a ?��b @��d A��g B��h D��i E��k F��m G��n I��o J��p K��q L��r M��t O��u P��v Q��w R��x S��z T��| U�� Z�� _�� a�� c�� d�� e�� f�� i�� k�� p�� r�� s�� u�� v�� w�� x�� z�� {��! |��" }��% ~��& ��' ���* ���+ ���- ���0 ���2 ���6 ���8 ���9 ���= ���> ���? ���A ���D ���G ���H ���J ���M ���O ���P ���R ���U ���V ���W ���Y ���[ ���\ ���^ ���_ ���a ���c ���d ���f ���g ���i ���l ���n " �Q�" ��� s�1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��� s�7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%����I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F�� s� Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j�� s�c Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ��� ��+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P���� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol g�^����9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9����o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow j�t����e Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command h erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n����[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig l�X����- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} met() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush nif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r oeform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 q�����} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<����w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%����I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\����7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT t P P �+����U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S�� ��% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%�� ��I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� �� �� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}��� �� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\�� ��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT y P P �+��!��U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��"��% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��%�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��$��I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���#�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��&�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��'��% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��*�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��)��I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���(�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��+�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��-�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���,�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��0�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���/��) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���.��- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��2�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���1�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��6��K Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��5�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���4��) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���3��- Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���8��# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��7��W Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��9��' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � 3 ^O$ 3 �l��=��W !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��<��K !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��;�� !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��:��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���>��# !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��?��' !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���A��# !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��@��9 !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��D�� !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��C�� !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��B��U !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���G��# "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��F��W "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��E��K "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��H��' "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���J��# "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��I��9 "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��M�� "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��L�� "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��K��U "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���O��# #Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��N�� "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��P��' #Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���R��# #Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��Q��9 #Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��U�� #Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��T�� #Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��S��U #Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��V�� #Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��W��) #Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��Y�� $Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ����X�� #Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��[�� $Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��Z�� $Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��\��) $Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��^��Q $Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���]�� $Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��_�� $Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��a��m $Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����`��1 $Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��c�� %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��b��e $Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] e �r+��V��: � � e D�1 � 0cdf4d5f9455b9e3e0eeca97fcb7fa4f7b76899970af7d0fa1bdc2c1ade16fe2D�0 � d81c62d59566998fb91a334f86a794e936a86dbd458bf3633b8ab3f2d471e581D�/ � bbfb59fb0bbbee9e6941d7531aa54e1719671ed000cfb77426d6cc19506cebe1D�. � 4aeb221b696dbe4b67c7b108b689cf26df6c7baa673fd4a529bd4df444eaf4fcD�- � 1bab4a2f960faa0a69de616785116c776e018a15bdc67d8f57416af2a12896dbD�, � c1a6b5c7d510c383e4cd61ceed4ca28f3f378bc0b62830d40f4fcb14f147b555D�+ � 43b8b70412f6c494314d9177182cfca0820391aec220e38ecf47b9fb9d4acd86D�* � 4d332cc4ff11d1dc4a0a7e039eb49da22510476539025c6d32b9a5a212c7cfc5D�) � 0bb28c9f68dfa70b3b78027fb8b42c4122bccb671f14d669ce89f85990ee5c7bD�( � 77eccc75e9f9bd1beac93212452f411060218b9f17289e0f6bd3b293aaeaf916D�' � 4f80068ba1aae1df0b1a343be00c4f8225667afd61a123bede56704529ab3f6cD�& � 5c75d507373106773899d8f085ed0c9921518de33190dfac20ba2aa951e5b2c2D�% � ae7235d8eadd22bf19fca7e2a758e17a26c6d01caf6e81861e6bf603fe82cb51 & & �U��d��) %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��f��Q %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���e�� %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��g�� %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��i��m %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����h��1 %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��l��= %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���k��3 %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��j��e %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��n��Q &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���m�� &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��o�� &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��q��m &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����p��1 &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��u��7 &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��t��= &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���s��3 &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��r��e &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���w��1 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���v�� &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��{��= 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���z��3 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��y��e 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��x��m 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<����w 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���~�� 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���}�� 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��|��7 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � Hd � � ����7 (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_����= (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3�� ��e 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] ( ��( �<����w (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}����� (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]����� (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � H � �K��}� (Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3����e (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t�� ��g (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i����Q (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � �� ��� s� )Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono Ί �� s�! )Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ͂M�� �� (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��s� )Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check цJ�� s�# )Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s� )Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m )Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�c )Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���s�1 )Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7 )Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] h 5) h �<����w *Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}����� *Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�F��s� )Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � H � �K��}� *Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3����e *Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t����g *Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i����Q *Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-�� ��W *Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M���� *Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} < �� < �K�� }� +Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� �� ��9 *Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L�� �� *Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��!��g +Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i�� ��Q +Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-��#��W +Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��"�� +Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � ��%��9 +Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��$�� +Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 1� ���'��1 +Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ߃J��&�� +Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � < � �M��)�� ,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?��(��{ +Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � N � �L��+�� ,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-��*��W ,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � ���.��1 ,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f �J��-�� ,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� ��,��9 ,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] < < �?��/��{ ,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d��0��E ,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] p ,p �7��2��k ,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��1�� ,Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} � � �P��4�� -Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol �^��3��9 -Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��6��o -Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow �t��5��e -Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��8��7 -Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �X��7��- -Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��9��I -Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��:�� -Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��;��Y -Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��<��] -Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] � � �d��=��E .Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] o ,p o �|��@��u .Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7��?��k .Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��>�� .Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} Y �}��C��w .Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��B�� .Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��A��A .Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] � � �?��F��{ .Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4��E��e .Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��D��9 .Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} �X �B��I�� /Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��H��A /Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|��G��u /Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}��J��w /Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] � � � �4��L��e /Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��K��9 /Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��N��A /Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��M��y /Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] bR @RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���q �u Á�w Ł�{ Ɓ� ǁ� ȁ� Ɂ� ˁ� ́� Ё� ҁ� Ӂ� ԁ� Ձ� ׁ� � ف� ہ�! ܁�# ݁�% ށ�' ��) ��+ ��. ��/ ��0 ��2 ��4 ��6 ��8 ��9 ��: ��; ��< ��= ��@ ��C ���F ���I ���J ���L ���N ���Q ���S ���U ���W ��Z ��[ ��\ ��] ��^ ��_ ��a ��b ��d ��f ��h ��k ��m ��o ��q ��t ��v ��w ��y ��{ ��} ��~ �� �� �� "�� #�� %�� &�� '�� (�� *�� +�� ,�� .�� /�� 0�� 1�� 3�� 4�� 5�� 6�� 7�� 8�� 9�� :�� ;�� <�� =�� >��! ?��" ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} % n�% �"��Q��A 0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ��P��7 /Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���O�� /Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � � � � �}��S��w 0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��R�� 0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4��U��e 0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��T��9 0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��W��A 0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��V��y 0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} n� �+��Z� �M 0Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��Y��7 0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���X�� 0Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��[��7 1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �f��\��I 1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��]�� 1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��^��Y 1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��_��] 1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��a�� 1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE �^��`��7 1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��b�� 1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���d��1 1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��c��# 1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] e �r+��V��: � � e D�> � 4effc7564fc196a4c6411751bedca4e9e01367a459bcaff78bc6849dc7cf71f5D�= � 4fdc56dc0f2c90e2f3e04a9191f8f4da825b37f6ac25fe246820e255ce02e8a1D�< � e6bb8a9138e3246eedff3c7522b5bdd6a006e9d47913ff4c10817c6036530510D�; � 2e6658df1cad274f8acd004adf1a98e57338b7aeae5ac65e2c25e78bfe0d2f99D�: � 2617375bbb0a52fe637164f0f40bbbc00ea29b150dd35ba0e0f79447454ad604D�9 � 3c1d7d5a10b6bbb96820657c57af7a774ba60dd1acb011d623b218102b3251f3D�8 � 68cfd2b5e2aa6b9bad7a4040def6ccec2aa6ca31c6acf4758e98b507e8efc105D�7 � e8c1f68569cc209cc9fa2df02ad4b7b0845192e6e74e5167c8cf3400acdc4c2bD�6 � 2e4f169246c2ce1c02926c3021b68913f273ab5b7474087d761d93b81e98eedbD�5 � 2a69b561a8c58b7ed126929ce0f305827b54da8604e8f662568fc8ec96090f26D�4 � 21af3e26269599f29ef700b687a3e84539aa03ffc025f0794649d54f0a041582D�3 � 454bbafafa2ed6a940377a73f755cc70525a8547533b1c20ff588842216101d0D�2 � 4d236aaf4435c04e7eca7641052df2e7fe956b46c24fdf530db5d3367025b1f4 A � A � ��fs� 2Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �J��es�# 2Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��hs� 2Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��gs�m 2Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��ks�c 2Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���js�1 2Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���is�7 2Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���m��+ 2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��ls� 2Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��os� 3Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �^��n��9 2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��qs� 3Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��ps�m 3Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��ts�c 3Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���ss�1 3Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���rs�7 3Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���v��+ 3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��us� 3Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��w��9 3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��y��7 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��x��? 3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��{�� 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��z�� 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ? ' ? �[��}��1 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T��|��# 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��~��? 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����c 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J�� �� 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J���� 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ����� 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend ! ? ' ? �[����1 5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 $�T����# 5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b����? 5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����c 5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J���� 5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J���� 5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��� �� 5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend ) K K �/�� ��Y 5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|�� ��s 5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[�� ��1 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 -�3�� ��a 5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b����? 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����c 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J���� 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J���� 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ����� 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend 2 K K �/����Y 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|����s 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3����a 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:����o 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/����Y 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|����s 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3����a 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ����� 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:����o 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ��� �� 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@�� ��{ 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>�� ��w 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ��� ��# 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M�� �� 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���!�� 8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��"��w 8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���#��# 8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��$�� 8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���&��' 8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��%�� 8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP B S z S �"��(��? 8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���'��} 8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���*��- 8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��)��] 8Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���,��' 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��+�� 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP F S z S �"��.��? 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���-��} 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��/��] 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��0�� 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���1�� 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��3��_ 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���2��' 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���5��} :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��4��9 9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��6��? :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��7��] :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��8�� :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���9�� :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��;��_ :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���:��' :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��>��9 :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��=��? :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��<��9 :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��?�� ;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���@�� ;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��B��_ ;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���A��' ;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��E��9 ;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��D��? ;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��C��9 ;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��F�� ;Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���G�� ;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 Y n n � ��I��9 <Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��H��Q ;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��K��9 <Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��J��? <Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��L�� <Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���M�� <Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 ^ �i��N��Q <Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��O��= <Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��P��m <Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��R��A <Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��Q��m <Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���S�� =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 d �i��T��Q =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��U��= =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��V��m =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��X��A =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��W��m =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��Z��_ =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���Y��+ =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���]��+ >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��\��[ =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig l�Z��[��3 =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] met() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush nif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r oeform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��`��[ >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig q�Z��_��3 >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��^��_ >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] ret() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush sif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r teform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��b�� >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 v���a��} >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���d�� >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��c��w >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���hs�1 ?Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���gs�7 ?Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��f��I >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��e�� >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} e �r+��V��: � � e D�K � 47a1d5d0a1ad064ec478ea6d44b259972b9111eefcf4ada7bbacbbe6aaf5a0beD�J � 8251d9d6d6785ae0ed2231e5acd6b3d6b86a215d008b16ed8f78ea929cfc9c4dD�I � 79d78fa443907f0ca28a70215cf61c47f965c37ef5ad56c02db408bdd9e238c2D�H � 3103d16f84c636f0c9414dff8107cf8586ae75fbcb90a3f62b7eee6412a9b821D�G � 1824faf3f57ad70fa29640a76cd08c71a18f5f97c91c1117929ab588f9aa44dcD�F � 6cdebf9c4780af0f03b80b00c611402cb25855be68d159669e31cebcae14e948D�E � 508911ce79f98f5eed94b7cbd546f0c6e54fe284ef02edf721f6bdeea590659cD�D � 3b5672f51204c1617610ae8cd9b6f52811ce9c9fa0d5d33100995554e954e356D�C � 843def5f9cabf23dde3a6c7cc1d52f68406f3af88c42d2d84dfe7a35cca79197D�B � 6ad05aacb55ec137da2b221c99a490660a5f37778642d8b590d33d5fbb093262D�A � 0d768d1ea1cafc2aac35e0917a8c6e9184c802e60dc7add05251d7c940193f32D�@ � af4cb1545cd730fee8de02f39c8201ee8909319eb1b8d4e09b97227b67b961b8D�? � 02d776d9eabc5a1600b998782d8d36dfd9f654699fe0d5ed0fcea97a75b44ac1 � � � �F��js� ?Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��is�c ?Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ A��$ C��& D��( E��* G��, H��. I��/ J��0 K��1 L��3 M��5 N��6 O��7 P��8 Q��9 R��; S��> T��? U��@ V��B W��E X��F Z��G [��I \��K ]��L _��M `��N a��O b��P c��R e��S f��T g��U h��V i��X j��Z k��] p��` u��b w��d x��h z��j |��k }��m ���o ���q ���s ���u ���w ���x ���y ���z ���} ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���" ���% ���& ���( ���+ ���- ���. ���0 ���3 ���4 ���5 ���7 ǁ�9 ȁ�: Ɂ�< ʁ�= ˁ�? ́�A �B ρ�D Ё�E с�G Ӂ�J ԁ�L Ձ�M ց�O � � ���k��+ ?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��m�� ?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ~�^��l��9 ?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��o��o ?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t��n��e ?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��q��[ @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��X��p��- ?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��s�� @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ����r��} @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���u�� @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��t��w @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��w��I @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��v�� @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��x��7 @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � P P �+��y��U @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��z��% @Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��}��I ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��|�� ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���{�� ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��~��7 ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � P P �+����U ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S�� ��% ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M���� ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%����I ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}����� ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D���� ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S����% BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M���� BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%����I BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}����� BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D�� �� BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L�� �� BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]��� �� BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ���� BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]��� ��) BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]��� ��- BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L���� CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]����� CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&����K CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ���� CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]�����) CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]�����- CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x �����# CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l����W CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T����' CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � 3 ^O$ 3 �l����W DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&����K DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ���� DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ����9 CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ��� ��# DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�� ��' DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ��� ��# DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �� ��9 DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��"�� DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��!�� DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+�� ��U DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���%��# ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��$��W ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��#��K ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��&��' ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���(��# ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��'��9 ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��+�� ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��*�� ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��)��U ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���-��# FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��,�� ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��.��' FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���0��# FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��/��9 FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��3�� FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��2�� FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��1��U FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��4�� FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��5��) FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��7�� GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��6�� FRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��9�� GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��8�� GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��:��) GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��<��Q GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���;�� GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��=�� GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��?��m GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ̅��>��1 GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��A�� HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��@��e GRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��B��) HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��D��Q HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���C�� HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��E�� HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��G��m HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ҅��F��1 HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��J��= HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���I��3 HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��H��e HRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��L��Q IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���K�� IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��M�� IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��O��m IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ׅ��N��1 IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��S��7 IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��R��= IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���Q��3 IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��P��e IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���U��1 JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���T�� IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��Y��= JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���X��3 JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��W��e JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��V��m JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��]��w JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���\�� JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���[�� JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��Z��7 JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � Hd � � ��`��7 KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��_��= KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3��^��e JRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] ( ��( �<��c��w KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���b�� KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���a�� KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � H � �K��e}� KJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��d��e KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��g��g KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��f��Q KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � �� ���js� LJan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono � ��is�! LJan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean �M��h�� KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} e �r+��V��: � � e D�X � 150b5e83d6acc1e5a6e22bee18216d6c7e0c581dca489071a61aab70eb9b93fbD�W � a133fe2fda391e345abde6444e57c6fbfb5ebcfe7720bc5b1ae1c3313bd38aedD�V � 94956f35cf998fadb6818b03bda0abd42d6bb6eaef56f6c880f239607a6b876aD�U � c61d2053d483f06c16fe09b040f911571abd663498e0d24266d849b51fdb0479D�T � e8c196f4e751026825afd99f7aaf6ab5d3234a2fba46b51b585338b80c837da0D�S � f1fbcc04902985414df518ea977cb39390df37dc9fc617aeab23437cf6fe80e5D�R � b6ef3e291bb25a5525d4b85ac8b4bad708a7f474d0baeb5ed6d75da8f0ff9c5eD�Q � 2ba740802cbbc7ff23957b8b2a38c06b773a113b40708d05815b6081f7eecb19D�P � 7eafe5ff654144eafe243a63bd26f5f8be857f9a6db277149949bba5f768b643D�O � c29c2680928459b5247e613db52774e62b9696ce64b4b85f878cdfd4775a8f05D�N � 933451069f9fdd66cf5110ba003ce53bcfcee82260f53a69105373c07f77d5f0D�M � 049526fdb7a05153ccc486726ea5c75e9cbf7eb168e6d4eb673555e2a2ed8967D�L � 81b4e4f401d2402736ceba4627eaafd5b615c2cc45aa4d4f941ea79562045139 up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��ls� LJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �J��ks�# LJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��ns� LJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��ms�m LJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��qs�c LJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���ps�1 LJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���os�7 LJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] h 5) h �<��t��w MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���s�� MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�F��rs� LJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � H � �K��v}� MJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��u��e MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��x��g MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��w��Q MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-��z��W MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��y�� MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} < �� < �K��}}� NJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� ��|��9 MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��{�� MRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t����g NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��~��Q NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � � �-����W NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M�� �� NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � ����9 NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L���� NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 1� �����1 NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ��J���� NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � < � �M���� ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?����{ NRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � N � �L�� �� ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-����W ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � ��� ��1 ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f ��J�� �� ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� �� ��9 ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] < < �?�� ��{ ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d����E ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] p ,p �7����k ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O���� ORado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} � � �P���� PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^����9 PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9����o PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow �t����e PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ����7 PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �X����- PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f����I PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ���� PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o����Y PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q����] PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] � � �d����E QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] o ,p o �|�� ��u QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7�� ��k QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O�� �� QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} Y �}��!��w QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B�� �� QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"�� ��A QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] � � �?��$��{ QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4��#��e QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��"��9 QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} �X �B��'�� RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��&��A RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|��%��u RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}��(��w RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] � � � �4��*��e RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��)��9 RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��,��A RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��+��y RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} % n�% �"��/��A SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ��.��7 RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���-�� RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens � � � �}��1��w SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��0�� SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} bR ZRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ف�U ہ�Y ܁�] ݁�` ށ�c ߁�e ��g ��j ��l ��n ��q ��t ��v ��x ��z ��} �� �� �� ��� ��� ��� ��� ��� ��� ��� ��� �� �� �� �� �� �� �� �� ��! ��$ ��' ��( ��* ��, ��/ ��1 ��3 ��5 ��8 ��9 ��: ��; ��< ��= ��? !��@ "��B #��D %��F &��I '��K (��M *��O +��R ,��T -��U .��W 0��Y 1��[ 3��\ 4��] 5��^ 6��_ 8��` 9��b ;��c <��d =��e >��f @��g A��i B��k E��l F��m G��n H��o J��p K��r L��s M��t N��v O��w P��y Q��{ R��| S��} T��~ U�� V�� W�� X�� � � � �4��3��e SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��2��9 SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��5��A SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��4��y SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} n� �+��8� �M SRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��7��7 SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���6�� SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��9��7 TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �f��:��I TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��;�� TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��<��Y TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��=��] TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��?�� TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE �^��>��7 TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��@�� TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���B��1 TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��A��# TAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��Ds� UJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check $�J��Cs�# UJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Fs� UJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Es�m UJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Is�c UJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Hs�1 UJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Gs�7 UJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���K��+ UAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��Js� UJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��Ms� VJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check )�^��L��9 UAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Os� VJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Ns�m VJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Rs�c VJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Qs�1 VJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Ps�7 VJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���T��+ VAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��Ss� VJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��U��9 VAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��W��7 WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��V��? VAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��Y�� WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��X�� WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE / ? ' ? �[��[��1 WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 2�T��Z��# WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��\��? WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��]��c WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��^�� WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��_�� WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���`�� WAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend 7 ? ' ? �[��b��1 XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 :�T��a��# XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��c��? XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��d��c XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��e�� XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��f�� XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���g�� XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend ? K K �/��i��Y XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��h��s XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��k��1 YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 D�3��j��a XAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) e �r+��V��: � � e D�e � 40b62a1609bf1e6b7221ee088dfbf97f47ad76f2533474c46260a24ca3439cdfD�d � 89508e57764f6439d8043a9ae25c798163d3dc7e1ea5019bab2063d6eaafb9c3D�c � b38f765f577317761aaaf492c0a93c317974aef18e4e53fea2895acb530ec50eD�b � 3198edac074ce72829e22b3fc0c16b2361413759b0418cd6443a6a5394eaf84aD�a � 394db1fa5c7f0d2612ba1c758328abe415aa0a5677f936aeeb8f95543e5c4110D�` � e107c061dd44f2966524c0a39c675a112e3f712a7f1b891c19bc27ddadc6d91bD�_ � 5ff60c9fc8d59e0004f0a615c0b3b023014fe0ba062442fdf0449dd359e754b9D�^ � a9a7c7111b8132043c9c9351bdd7bf34051ae1eb9ab0c90e8e7582ca543c49d6D�] � 6ec6b4d2ab3c7cf65dceaadd6a13d91e6ca7e48b3d6bf5712f0c0bf3639015b0D�\ � 3ce3178d47c0937ca4073ad24a4d21e17880a93c83bed7d7cdde515bda87c789D�[ � 53ebea1b387c7333eb49334b5bf8e867d5307742f502d7d40091abe8eb42387bD�Z � b3587c7ba2e0d12bead8a84ad8d8aad31b6a2da64b0de946850e55afd3787193D�Y � cb86f1399947fbb9131708d22997718ff926c00d9e0cdfa9ce37811fe7e47e4d ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��l��? YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��m��c YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��n�� YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��o�� YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���p�� YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend I K K �/��r��Y YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��q��s YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��s��a YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��t��o YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��v��Y ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��u��s ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��w��a ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���y�� ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��x��o ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���{�� ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��z��{ ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��|��w ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���}��# ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��~�� ZAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ����� [Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>�� ��w [Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � �����# [Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M���� [Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + �����' [Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H���� [Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP Y S z S �"����? [Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]�����} [Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , �����- [Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1����] [Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ��� ��' \Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H�� �� \Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP ] S z S �"�� ��? \Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]��� ��} \Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1�� ��] \Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ���� \Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ����� \Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_ \Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����' \Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � �����} ]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ����9 \Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"����? ]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1����] ]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ���� ]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ����� ]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_ ]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����' ]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � �� ��9 ]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����? ]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ����9 ]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � �� �� ^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ��� �� ^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2�� ��_ ^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��� ��' ^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��#��9 ^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��"��? ^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��!��9 ^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��$�� ^Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���%�� ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 p n n � ��'��9 _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��&��Q ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��)��9 _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��(��? _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��*�� _Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���+�� _Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 u �i��,��Q _Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��-��= _Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��.��m _Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��0��A _Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��/��m _Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���1�� `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 { �i��2��Q `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��3��= `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��4��m `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��6��A `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��5��m `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��8��_ `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���7��+ `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���;��+ aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��:��[ `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��Z��9��3 `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��>��[ aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��Z��=��3 aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��<��_ aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��@�� aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ����?��} aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���B�� aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��A��w aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���Fs�1 bJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Es�7 bJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��D��I aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��C�� aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��Hs� bJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��Gs�c bJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���I��+ bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��K�� bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^��J��9 bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ [�� \�� ^�� _�� `�� a�� b�� c�� d�� e�� f�� g�� h�� i�� j�� k�� l�� m�� n��# o��$ q��% r��' s��) t��* v��+ w��, x��- y��. z��0 |��1 }��2 ~��3 ��4 ���6 ���8 ���; ���> ���@ ���B ���F ���H ���I ���K ���M ���O ���Q ���S ���U ���V ���W ���X ���[ ���\ ���] ���^ ���a ���b ���c ���f ���g ���i ���l ���n ���r ���t ���u ���y ���z ���{ ���} ��� � ā� Ł� Ɓ� ́� � ρ� Ё� ց� ׁ� � ށ� ߁� �� �� �� �� �� ��" ��# ��% ��( ��* ��+ ��- ��1 ��3 d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��M��o bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t��L��e bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��O��[ cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��X��N��- bAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��Q�� cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ����P��} cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���S�� cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��R��w cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��U��I cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��T�� cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��V��7 cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � P P �+��W��U cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��X��% cRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��[��I dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��Z�� dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���Y�� dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��\��7 dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � P P �+��]��U dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��^��% dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��a�� dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��`��I dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���_�� dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��b�� dRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��c��% eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��f�� eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��e��I eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���d�� eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��g�� eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��i�� eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���h�� eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��l�� eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���k��) eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���j��- eRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] e �r+��V��: � � e D�r � b59e577acfd79936a81667c77131d1327e4ad70bde597f697884a4eaf7e3a7ecD�q � 54ccdc7cf35a5a397da2776db1e3698403ddd8b7aaa89e9bd1156f4f0b376933D�p � 5c3bcfc599ddd884790cbf5e2d8043339f4cd5b91ad9595afa0db6b779424c22D�o � fd72ad4e19f26b5ab55c6b53a5824234f78c29cf3c20aca13156acea64a3346cD�n � 3598b7d61bba2f202c95efea45958f70f97c86c499e19042f49589dccbf233ceD�m � f53cc1052d30f24f16353f3b8289baea8f6b5784241e361ca528cc3a0eaa3777D�l � 76facf50f1b80b009a8db32a440b75f305a0ebb492bfd12472396c89645ad637D�k � b32b8584f13412301461463bde85e0fdc2dde858c115cd5ff1e7c299096a8d77D�j � 88ec95b43c8491db9c18162f1e7fba8a23bdd4c936af58ebbc5e3ca5294bfb53D�i � 262dbb7f2a09156ec1388f48b84cdfae97e0c8a8a47a0eabf39d4db7348d2f88D�h � 85883036219c6afb70af3efeedd40855b4513b05e5a5134abc56c4b95841a125D�g � 6858b0825e7c10d48e4a834df4baf94b38ae7f99b036340669e3abf74bdfc689D�f � 57519dda2c881614316fc810027c0c66b31bab6e5e16dcd0d91cf84b6d63fc3a % v % �L��n�� fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���m�� fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��r��K fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��q�� fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���p��) fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���o��- fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���t��# fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��s��W fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��u��' fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � 3 ^O$ 3 �l��y��W gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��x��K gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��w�� gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��v��9 fRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���z��# gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��{��' gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���}��# gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��|��9 gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B�� �� gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ���� gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��~��U gRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M �����# hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l����W hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&����K hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T����' hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G �����# hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ����9 hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B�� �� hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ���� hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ǁ+����U hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ��� ��# iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L�� �� hRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�� ��' iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G �����# iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �� ��9 iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B���� iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ���� iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 с+����U iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L���� iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U����) iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ���� jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ل���� iRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L���� jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B���� jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U����) jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i����Q jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@���� jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7�� ��m jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ��� ��1 jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L�� �� kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3�� ��e jRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U�� ��) kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��"��Q kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���!�� kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��#�� kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��%��m kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ���$��1 kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��(��= kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���'��3 kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��&��e kRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��*��Q lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���)�� lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��+�� lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��-��m lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ���,��1 lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��1��7 lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��0��= lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���/��3 lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��.��e lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���3��1 mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���2�� lRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��7��= mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���6��3 mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��5��e mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��4��m mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��;��w mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���:�� mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���9�� mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��8��7 mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � Hd � � ��>��7 nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��=��= nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3��<��e mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] ( ��( �<��A��w nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���@�� nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���?�� nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � H � �K��C}� nJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��B��e nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��E��g nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��D��Q nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � �� ���Hs� oJan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono �� ��Gs�! oJan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ��M��F�� nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��Js� oJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��Is�# oJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Ls� oJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Ks�m oJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Os�c oJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Ns�1 oJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Ms�7 oJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] h 5) h �<��R��w pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���Q�� pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�F��Ps� oJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � H � �K��T}� pJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��S��e pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��V��g pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��U��Q pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � �-��X��W pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��W�� pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} < �� < �K��[}� qJan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� ��Z��9 pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��Y�� pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��]��g qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��\��Q qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] � � � �-��_��W qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��^�� qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � ��a��9 qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��`�� qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 1� ���c��1 qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f �J��b�� qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � < � �M��e�� rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?��d��{ qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � N � �L��g�� rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-��f��W rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � ���j��1 rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f �J��i�� rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� ��h��9 rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] < < �?��k��{ rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d��l��E rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] p ,p �7��n��k rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��m�� rRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} e �r+��V��: � � e D� � 7c45ba29959e72ceece7bd3f48bcc0ce0a86ebce4677a50e9d95a46e172b5d3bD�~ � c3571b20ed80af5bcdad26c4ffded5902a413e69a9f36e66ea22eb7f0b7343beD�} � 73ae0d5fb6285b4b0077f98e47a68f4b9fece79c2d81f4ee0718940d27177616D�| � 56c9932aa2318a64e391b3f64c794e77737aeacd923b2b7d8e02b450cd58abd2D�{ � 540ad2675ab792c4e347811b9c59c9dfa46be5932ed582b6b0748c7a27660973D�z � 34255ef50bd9c16239a9a579c23a1bc1f046428a2aecf0fb06e04340b46af985D�y � 5f9ffa10d0718dbd468c695dee255d77d9ba1a9b0d1b7e44a156806dcdca67a1D�x � d9305a12e977c57f2881d0d6b5d0a5c612d311bf062b22798ff09ce88469752cD�w � 4f125e807f2d9654af85653665201a2fb6833421172f030513ae09616ba3f069D�v � a3ef423198831cced03969fcb478cb2a5ee78ec107a8600aa98854d428fa7a96D�u � c560870127d4c5652e42c74ffbb3cf96a864ca994702fffd84bfe5a6b5275464D�t � d4ce276deccf36c3cdff38a52ff6f73bd2c271d8df45463c61cc66cdd8dd7e18D�s � c91dc3bbc7593fb7442fa9ec947f30d95bad094d5b4180e4669380d535253bb7 � � �P��p�� sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol �^��o��9 sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��r��o sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow �t��q��e sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��t��7 sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �X��s��- sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��u��I sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��v�� sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��w��Y sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��x��] sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] � � �d��y��E tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] o ,p o �|��|��u tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7��{��k tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��z�� tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} Y �}����w tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��~�� tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��}��A tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] � � �?����{ tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4����e tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^�� ��9 tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} �X �B���� uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"����A uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|����u uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}����w uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] � � � �4����e uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^����9 uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b�� ��A uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~�� ��y uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} % n�% �"�� ��A vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� �� ��7 uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]��� �� uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens ( � � � �}����w vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B���� vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4����e vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^����9 vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b����A vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~����y vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] bR rRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��; ��> ���A ���C ���E ���H ���J ���L ��O ��R ��T ��V ��X ��[ ��] ��_ ��a ��c ��e ��g ��j ��k ��l ��n ��p ��r ��t ��u ��v ��w ��x ��y !��| "�� #�� $�� %�� &�� '�� )�� *�� +�� ,�� /�� 1�� 2�� 3�� 4�� 5�� 6�� 8�� 9�� :��" <��$ =��' >��) ?��+ A��- B��0 C��2 D��3 E��5 G��7 H��9 J��: K��; L��< M��= O��> P��@ R��A S��B T��C U��D W��E X��G Y��I [��J \��K ]��L ^��M `��N a��P b��Q c��R d��T e��U f��W g��Y h��Z i��[ j��\ k��] l��^ m��_ n��` p��b q��d ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} n� �+��� �M vRadomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ����7 vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]����� vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens . dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ����7 wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han 0 �f����I wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ���� wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o����Y wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q����] wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R�� �� wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE 7�^�� ��7 wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O�� �� wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ��� ��1 wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T�� ��# wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��"s� xJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ;�J��!s�# xJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��$s� xJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��#s�m xJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��'s�c xJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���&s�1 xJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���%s�7 xJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���)��+ xAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��(s� xJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��+s� yJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check @�^��*��9 xAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��-s� yJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��,s�m yJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��0s�c yJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���/s�1 yJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���.s�7 yJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���2��+ yAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��1s� yJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��3��9 yAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��5��7 zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��4��? yAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��7�� zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��6�� zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE F ? ' ? �[��9��1 zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 I�T��8��# zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��:��? zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��;��c zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��<�� zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��=�� zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���>�� zAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend N ? ' ? �[��@��1 {Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 Q�T��?��# {Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��A��? {Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��B��c {Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��C�� {Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��D�� {Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���E�� {Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend V K K �/��G��Y {Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��F��s {Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��I��1 |Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 Z�3��H��a {Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��J��? |Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��K��c |Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��L�� |Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��M�� |Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���N�� |Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend _ K K �/��P��Y |Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��O��s |Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��Q��a |Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��R��o |Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��T��Y }Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��S��s }Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��U��a }Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���W�� }Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��V��o }Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���Y�� }Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��X��{ }Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��Z��w }Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���[��# }Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��\�� }Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���]�� ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��^��w ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���_��# ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��`�� ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���b��' ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��a�� ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP o S z S �"��d��? ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���c��} ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���f��- ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��e��] ~Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���h��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��g�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP s S z S �"��j��? Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���i��} Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��k��] Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��l�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���m�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��o��_ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���n��' Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���q��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��p��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] e �r+��V��: � � e D� � 828e5f8c216c003561b21fac3ee1c2a2c2d556fe14b7f7eb5cecff383dcdcddeD� � df51484667e5b744416e438fadb87d6b7f90ebd7deb4e6682c6fb5544b4824d9D� � 39e6418349394ca9bdce4ea754f217c46186d4d7ac6e256c57becbcf78cb2932D� � c5f291e7ee7a541358f9f6a3957b58ba61670f95010f0fbfb4d6b94d30857d5cD� � 84a70ceb4fc3a611fb4f2317063db48a3627bf5b481b3c89956e1f1e9fa9f5fcD� � 078d626065367dc1b0c00d308d8b5d9d69fe369a31b59dbf38747ea1e98647dfD� � b89f6284503fe622422027e205df72fde54169ba290d768ca1952506a29792cbD� � 05cf4fd79bba0f69976ed978e39e96312e5c1ed1fc98158138579aa9d2b1ac01D� � 1427f803b91f38e23ae66e6fb49eb6363167e457e76054fcb63fee011d6763b3D� � 6f1bbacef1dc67ded3f5dae9926f3a9422cbb14531e25cbb1668f8ac69d00b8dD� � 0952cfe96c702aedc34ce0dcba4f7bde61e7ef84de1ad0057e39e6750b2c0bdaD� � 8debaae538b7c7704b4ad782c4f0a725f3c0977f97d9cde4eb6a1546e54f02e7D� � d196c69e20dcc6a970af086c699d1d015396019ac8638386994deb8017fcc72b � � �"��r��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��s��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��t�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���u�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��w��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���v��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��z��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��y��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��x��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��{�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���|�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��~��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���}��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"�� ��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � n n � ����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i����Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i�� ��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_�� ��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7�� ��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!����A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7�� ��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i����Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_����= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7����m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!����A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7����m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p����_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]�����+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� �����+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n����[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��Z����3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n�� ��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��Z����3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p����_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � �� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ���� ��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<�� ��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���$s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���#s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��"��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��!�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��&s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��%s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���'��+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��)�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^��(��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��+��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t��*��e �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��-��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��X��,��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} bR ! RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ t��h u��j v��k w��l x��m y��o z��q |��r }��s ~��t ��u ���w ���z ���{ ���| ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���$ ���& ���' ���) ���+ ���- ���/ ���1 ���3 ���4 ���5 ���6 ���9 ���: ���; ���< ���? �@ Á�A ā�D Ł�E Ɓ�G ǁ�J ȁ�L Ɂ�P ʁ�R ́�S ́�W �X Ё�Y с�[ ҁ�^ �a ځ�b ہ�d ܁�g ��i ��j ��l ��o ��p ��q ��s ���u ���v ���x ���y ���{ ���} ���~ ��� ��� ��� !�� !�� !�� !�� !�� !�� ! �� ! �� �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��/�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ����.��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���1�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��0��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��3��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��2�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��4��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � P P �+��5��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��6��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��9��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��8�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���7�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��:��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � P P �+��;��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��<��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��?�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��>��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���=�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��@�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��A��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��D�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��C��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���B�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��E�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��G�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���F�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��J�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���I��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���H��- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��L�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���K�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��P��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��O�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���N��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���M��- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���R��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��Q��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��S��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � 3 ^O$ 3 �l��W��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��V��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��U�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��T��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���X��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��Y��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���[��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��Z��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��^�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��]�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 Ӂ+��\��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���a��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��`��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��_��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��b��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���d��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��c��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��g�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��f�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ݁+��e��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���i��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��h�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��j��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���l��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��k��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��o�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��n�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 �+��m��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��p�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��q��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��s�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ���r�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} e �r+��V��: � � e D� � 6a5cc17610dacd423285c7b8f0036b7cdcfbc9fb0e513eca14b1d7d5ea047f7fD� � 07bd35c3abbf6026fb0e99d204b230ccbed3b91ccbed6d0675f5dc885931ea62D� � bee03f8565ac02484c05292876b9c0976e9334dad12bbf643dd9f59526e9eb6dD� � 97ca74d50cef86200eaedf11cbb46855b4d2c943de9de770a9b024fbbf90ce3dD� � b1471a49f356e514174b94e92dfc8993323e25a2de938cda266f9cd7d5850665D� � 8359e9ef711ab7df3dd2ff2d776303381cb9569b28010fc635d1dc38c63d0a3cD� � 70b9436a659665181aa90524926ff7ebeebcbc15038624b5a49e0657dedfb584D� � 61f3ebaaeea6b7aa7f2cb2e4e49d7030e15a0242954617931c4ca2d74e49c807D� � 9d5c67e50f13bee074d4860c206d81b8461ec0b7593a7cf3b207abe9f1e6f815D� � a6114fbcf7f5bf08c4c84d6d0e2551e1175af5cd5b08fe5fa1557b575e292d02D� � 36f13b26a3b985a2d5e41a86724a23f3387adf18ce34902378ed32345f865d1aD� � ff0af5a6e3acbbdec8607cb8aa6f258edbb87c22d9e2e162b476d366c16a6372D� � 64f15baadb874e4dcc756fc50e0f361c704a78fb0c5c3e1dee25e51bd7bc0347 � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��u�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��t�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��v��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��x��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���w�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��y�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��{��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����z��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��}�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��|��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��~��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i�� ��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7����m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ! �����1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_����= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i����Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@�� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7�� ��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc !��� ��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ����7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_����= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]��� ��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3�� ��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W �����1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_����= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7����m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ! � _TH � �<����w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ����7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � Hd � � �� ��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_����= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3����e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] ( ��( �<�� ��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � H � �K��!}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3�� ��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��#��g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��"��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] ! �� ���&s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono !� ��%s�! �Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean !�M��$�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} !v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��(s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check !�J��'s�# �Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��*s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��)s�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��-s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���,s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���+s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] h 5) h �<��0��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���/�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]�F��.s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � H � �K��2}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��1��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��4��g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��3��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] ! � � � �-��6��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��5�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} < �� < �K��9}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]� ��8��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��7�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t��;��g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i��:��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] ! � � � �-��=��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]�M��<�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} � �� � ��?��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]�L��>�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} � 1� ���A��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f !#�J��@�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] � < � �M��C�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}�?��B��{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � N � �L��E�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.101.1.el7]d��@- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}�-��D��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.100.1.el7]d��- bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] � � � ���H��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.104.1.el7]e2k�- CI: Remove unused kpet_tree_f !'�J��G�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.103.1.el7]e#�@- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)� ��F��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.102.1.el7]ev@- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] amily (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] < < �?��I��{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.105.1.el7]eH�@- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} � � �d��J��E �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] p ,p �7��L��k �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��K�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} � � �P��N�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol !,�^��M��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��P��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow !/�t��O��e �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command !- erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��R��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han !1�X��Q��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��S��I �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��T�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��U��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��V��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] � � �d��W��E �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.106.1.el7]ee�@- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280] - gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280] - gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280] - gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280] - gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280] - gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280] - gfs2: ignore negated quota changes (Bob Peterson) [2196280] - gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280] - gfs2: Add quota_change type (Bob Peterson) [2196280] - gfs2: Rename sd_{ glock => kill }_wait (Andreas Gruenbacher) [2196280] - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280] o ,p o �|��Z��u �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]�7��Y��k �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.108.1.el7]e���- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]�O��X�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.107.1.el7]ez�@- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753} Y �}��]��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��\�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��[��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223] � � �?��`��{ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.2.el7]e�f@- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}�4��_��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��^��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} �X �B��c�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}�"��b��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]�|��a��u �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.109.1.el7]e��@- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703] - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973] - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973] � � �}��d��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227] � � � �4��f��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��e��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��h��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��g��y �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} % n�% �"��k��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.110.1.el7]e��- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]� ��j��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���i�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens !> � � � �}��m��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.112.1.el7]e��@- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397] - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921} - cpufreq: Initialize policy->kobj while allocating policy (Waiman Long) [2161654] - net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227] - net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]�B��l�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.111.1.el7]e�M@- redhat: rewrite genlog and support Y- tags (Jan Stancek) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335] - fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409} � � � �4��o��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.114.1.el7]e��- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}�^��n��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.113.1.el7]e�@- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896} - Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896} � �� �b��q��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.116.1.el7]e�q�- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]�~��p��y �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.115.1.el7]e�7@- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] ure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785] - vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558} - selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751] - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002} - cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301] - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622} - NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193] - RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775} - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602} n� �+��t� �M �Radomir Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.119.1.el7]f<��- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]� ��s��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.118.1.el7]f�@- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]���r�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.117.1.el7]f ��- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052] - tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052] - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623} - net/sched: sch_hfsc: Ens !C e �r+��V��: � � e D�& � 48050d32a9ddb2c79d03c638c04cd306724f7ac310231a77812108d47d170a94D�% � 995f1138e1de2ec2b063d80c34f72c7c9580839633287baad40f5b5b23f9e258D�$ � 6e241bf0dc50bd058f110b48194543b466e895d9ce51ae777aa7f7d34f994e08D�# � 02cbd7332b3ce796fb31c211ff00e807700217dbe4cbf3860f61c4a3bb69beb8D�" � 69c2b3156d7f7348e92c9b6d94a15da2b8f77e0597041944eb9741c941e07001D�! � d0f3c1d37d812e6fbf2b4e853fb66fd0ffe2a908b0bd0749ea1f99b53198ad71D� � 349059abdcb4206de241619b0a997e70897934335a8863a2070dccf45c49f019D� � 08d3a3571d95f12d505af7454de2dadabca497aa265dbce4ff86b0317462b5dbD� � 44904175313b13552ac962d42d456dc5d52bface994ef485f56c33f7f6971440D� � 6a47e214a36fc58ad9b00ab50073240c79076c8bd04a01dd01029f8ca43122bdD� � 9c1793d4db51f7f371d7e73208f169004d3aba5ed38b51d28f55cdcc8cb7f3c0D� � 84b8b611d8300bcaa1b8a5f55f2a12f6469df74e32e649b9b505e76925339810D� � 3b37792998533e55b2ebe20d10052f6104ae209a5db1a84826bfde614e6d7c44 dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��u��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han !F bR !�RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ! �� ! ��! !��# !��& !��( !��* !��- !��0 !��2 !��4 ! ��6 ! ��9 ! ��; ! ��= !!��? !"��A !$��C !%��E !&��H !(��I !)��J !*��L !+��N !.��P !0��R !2��S !3��T !4��U !5��V !6��W !7��Z !8��] !9��` !:��c !;��d !<��f !=��h !?��k !@��m !A��o !B��q !D��t !G��u !I��v !J��w !K��x !L��y !M��{ !O��| !P��~ !Q�� !S�� !T�� !U�� !V�� !X�� !Y�� !Z�� ![�� !\�� !^�� !_�� !a�� !b�� !c�� !d�� !f�� !g�� !i�� !j�� !k��! !l��" !n��# !o��% !p��' !r��( !s��) !t��* !u��+ !w��, !x��. !y��/ !z��0 !{��2 !|��3 !}��5 !~��7 !��8 !���9 !���: !���; !���< !���= !���> !���@ !���B !���D !���F �f��v��I �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��w�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��x��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��y��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��{�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE !N�^��z��7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��|�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���~��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��}��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � �� s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check !R�J��s�# �Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 �����+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � �� s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check !W�^����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D�� s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o�� s�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��� s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��� s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 �����+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^����7 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!����? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE !] ? ' ? �[����1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 !`�T����# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b����? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend !e ? ' ? �[�� ��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 !h�T�� ��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�� ��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�� ��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��!�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��"�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���#�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend !m K K �/��%��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��$��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��'��1 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 !q�3��&��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��(��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��)��c �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��*�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��+�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���,�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend !v K K �/��.��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��-��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��/��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��0��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��2��Y �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��1��s �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��3��a �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���5�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��4��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���7�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��6��{ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��8��w �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���9��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��:�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���;�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��<��w �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���=��# �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��>�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���@��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��?�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP !� S z S �"��B��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���A��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���D��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��C��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���F��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��E�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP !� S z S �"��H��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���G��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��I��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��J�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���K�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��M��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���L��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���O��} �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��N��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��P��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��Q��] �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��R�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���S�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��U��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���T��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��X��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��W��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��V��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��Y�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���Z�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��\��_ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���[��' �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��_��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��^��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��]��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��`�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���a�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 !� n n � ��c��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��b��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��e��9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��d��? �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��f�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���g�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 !� �i��h��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��i��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��j��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��l��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��k��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���m�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 !� �i��n��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��o��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��p��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��r��A �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��q��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��t��_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���s��+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���w��+ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��v��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig !��Z��u��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] !�et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush !�if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r !�eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] e �r+��V��: � � e D�3 � c09c4232be25f378a871198874931161c40b1ce864dffbd95137c1d37205669cD�2 � 2b66b267a753255256f090bf87977338168b89d26c4ffd982c87cd2f91b93577D�1 � f7211e59a025b27356cfb06417188c0dd5e275b865c332da16611d69cbc3addbD�0 � 256f88bd5667a9d5534690123098dcb92c0e72a1a20c14cfc7fc6f93d1c33891D�/ � 94a821399c6834a9613024e8e79095fed47945651c6f3043fb698f645b47ea98D�. � 46160c3e8468e10ca76482b787522ad64e1f769900fb6947b4bc6690893303cbD�- � b3e690b11cafa64b176ad1733771549c822362e0515190949a20dd95d397be58D�, � 3c1b09a234b987d0d6b7eeda50bfd65fdd56ba1cd18a3d7bfaf6c502e6a18295D�+ � ba86ad50d0caa853696fbf8bb669856b215fcf866bddf9a40a79e2097b6bdac7D�* � b045612fcdf478362a31afe42cbcbfa3696fd627cd7125c30615831a7f9c7831D�) � ba701cb5769f4b33298d989a3a2f322062b88774a949cc71f4d59c46e785f253D�( � 7359842aed62ed18b7e387856697f0a6cf8b16b27c7c68064ba6567b32c76b6bD�' � b96b6f75231c9bd50c073462605d9aa5494f79623d07db42df2d505c858be737 � , � �n��z��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig !��Z��y��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��x��_ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] !�et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush !�if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r !�eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��|�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 !����{��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���~�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��}��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%�� ��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � �����+ �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol !��^����9 �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9�� ��o �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow !ĉt����e �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command !� erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n�� ��[ �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig !ƄX�� ��- �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} !�et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush !�if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r !�eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � �� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 !˂�� ��} �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<����w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} bR "$RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ !���I !���J !���K !���M !���O !���P !���Q !���R !���S !���U !���X !���Y !���Z !���\ !���_ !���` !���a !���c !���e !���f !���g !���h !���i !���j !���l !���m !���n !���o !���p !���r !���t !���w !���z !���| !���~ !��� !��� !��� !��� !Á� !Ł� !ʁ� !́� !� !Ё� !с� !ҁ� !Ӂ� !Ձ� !ց� !ׁ� !� !ف� !ځ� !ہ�" !܁�# !݁�% !ށ�( !߁�* !��. !��0 !��1 !��5 !��6 !��7 !��9 !��< !��? !��@ !��B !��E !���G !���H !���J !���M "��N "��O "��Q " ��S " ��T " ��V "��W "��Y "��[ "��\ "��^ "��_ "��a "��d "��f "��g "��i " ��m " ��o " ��s " ��w "!��z "#��} Q �Q �%����I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\����7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT !� P P �+����U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S����% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%����I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\����7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT !� P P �+����U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S����% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M�� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%�� ��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D�� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S�� ��% �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��"�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��!��I �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��#�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��%�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���$�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��(�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���'��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���&��- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��*�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���)�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��.��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��-�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���,��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���+��- �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���0��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��/��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��1��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for !� 3 ^O$ 3 �l��5��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��4��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��3�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��2��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���6��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��7��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for !� G ^ G ���9��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��8��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��<�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��;�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 !�+��:��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} !� CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV !�E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 !�CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 !�] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���?��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��>��W �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��=��K �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��@��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for !� G ^ G ���B��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��A��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��E�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��D�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 !�+��C��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} !� CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV !�E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 !�CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 !�] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���G��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��F�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��H��' �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for !� G ^ G ���J��# �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��I��9 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��M�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��L�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 !��+��K��U �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} !� CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV " E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 "CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 "] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��N�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��O��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��Q�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 "���P�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} " CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV "E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 " CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 " ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��S�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��R�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��T��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��V��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���U�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��W�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��Y��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc "���X��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��[�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��Z��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��\��) �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��^��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���]�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��_�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��a��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc "���`��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��d��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���c��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��b��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��f��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���e�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��g�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��i��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc "���h��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��m��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��l��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���k��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��j��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���o��1 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���n�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��s��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���r��3 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��q��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��p��m �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc " � _TH � �<��w��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���v�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���u�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��t��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � Hd � � ��z��7 �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��y��= �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�3��x��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] e �r+��V��: � � e D�@ � 1e71ddbce6e19382bbeabad1c266e4c7cb09e2a56d99175af4ac9ac047af3945D�? � 20135be9052bd1b2d8da133fe7cc987b80d4dc2685146012968f6b8e78e0bfe9D�> � 9bfce694395b42428b130fade4131953efe8248a166cb9df74a2681d8de08ecbD�= � 49aab94d53d2b184f6a56304123436d4e5036e2f12df6e2e89bef3f8e09e48c5D�< � f08e9ea6985102fff682040f9282a64d08ae60b52a53ac25a2ae2d14b381049eD�; � 3594f2b7367495aba0e2ad40d7aeabb3ec7bcd176bfa09127a9021573f936f66D�: � 93e83a7482939b72a1377200f3ba36de2f5a593ed72db969095bca9b712022f4D�9 � b46ce984b02b31bec731f80328c745600ec4e07a5c031e77dbb554e88ba7fcbbD�8 � e855f087b1b23b7efc6503e87350c4cca1ef6881dc97c31f1512bcda747a478bD�7 � 4de0f5c0f1ddd055c4b4b2635e35081b0a75f314bbe5cb8978790bfc21cebbc8D�6 � 44c119ffc1f4001f24a6905dc7a8b1db1b192babbc6e3390b81e54adfb63b7b8D�5 � e161fe668a338dbcc5fd4207138cf06b234756554c7b000fd5627366c98b5f3aD�4 � 738ba060f72edaaec140a48f940f7fdf573a9f888afd244b937e86cefba2f1ca ( ��( �<��}��w �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���|�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���{�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] � H � �K��}� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.96.1.el7]d��@- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]�3��~��e �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] �t����g �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.98.1.el7]d˖�- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]�i�� ��Q �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.97.1.el7]d�g�- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] "% �� ���s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono ")� ��s�! �Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean "(�M���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.99.1.el7]d��@- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} "*v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ",�J��s�# �Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m �Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j�� s�c �Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��� s�1 �Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��� s�7 �Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] � 5� � }��i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN�0�� i�y �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43]�@�- module-setup: re-fix 99kdumpbase network dependency - kdumpctl: bail out immediately if host key verification failed�F�� s� �Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � a�� � ~��i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��i�q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��i�Q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���i�M �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel � t�{�; � �,��i�q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��i�Q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���i�M �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN���m�# �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working V { ~�v � V ���"i�M �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��!i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during sshx�� a� �Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()��� m�# �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~�� i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw�� i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� �� i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes(). $ _�)�, � $ x��)a� �Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()���(m�# �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~��'i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��&i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��%i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��$i�q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��#i�Q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems. � ��c�C � � ��/i�Q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���.i�M �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��-i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��,i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN�0��+i�y �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43]�@�- module-setup: re-fix 99kdumpbase network dependency - kdumpctl: bail out immediately if host key verification failedl��*a{ �Pingfan Liu <piliu@redhat.com> 2.0.15-51.3`�e@- Throttle kdump reload request triggered by udev event H O�O�A � H }��6i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��5i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN���4m�# �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~��3i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��2i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��1i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��0i�q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias() � a�� � ~��<i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��;i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��:i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��9i�q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��8i�Q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���7i�M �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel � t�w�7 � �,��Bi�q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��Ai�Q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���@i�M �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��?i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during sshx��>a� �Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()���=m�# �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working Q { ~�v Q �0��Ii�y �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43]�@�- module-setup: re-fix 99kdumpbase network dependency - kdumpctl: bail out immediately if host key verification failedl��Ha{ �Pingfan Liu <piliu@redhat.com> 2.0.15-51.3`�e@- Throttle kdump reload request triggered by udev eventx��Ga� �Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()���Fm�# �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~��Ei� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��Di� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��Ci� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes(). �h� � w��Pi� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��Oi� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��Ni�q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��Mi�Q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���Li�M �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��Ki� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��Ji� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN � ~�z�Z � � ��Vi�Q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���Ui�M �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��Ti� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��Si� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN���Rm�# �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~��Qi� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rules D O�O�A � D }��]i� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during sshx��\a� �Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()���[m�# �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~��Zi� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��Yi� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��Xi� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��Wi�q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias() � a�� � ~��ci� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��bi� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��ai� �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��`i�q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��_i�Q �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���^i�M �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel � t��&F � ���ig�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��hg�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��ggY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129l��fa{ �Pingfan Liu <piliu@redhat.com> 2.0.15-51.3`�e@- Throttle kdump reload request triggered by udev eventx��ea� �Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()���dm�# �Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working ^ 0� W ^ �t��ni� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��mi�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���li�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���ki� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��ji�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441 ; m��� ; �K��ti�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���sg�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��rg�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��qgY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���pi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���oi�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401 � y�'. � ���yi�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��xi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��wi�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���vi�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���ui� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560 G x6� � G ���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��~i�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���}g�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��|g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��{gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���zi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159 e �r+��V��: � � e D�M � 6f455484f1eb5f3b6fb66db239a002b80058c5b1b96396b1f9845be413af51dfD�L � f136bc0eecf5d5320db54998eac1c4599ab87a312d5ce7a2cefc841ab054b1eaD�K � 7bddd4fb53bfa9c6ecfb51584e6173525154d1432fdd23c18162b8a5428fd9c2D�J � ebe9101eafa195e97d5191257396d826d54a03212851b56130c2502068cb8f4cD�I � 0e46815b96448a8115c16703aeaeadf07680cb2172f0028f3a8ab4b9d6e6897dD�H � 1e050a70197e546f07c1f78ed2e33fa01d93756947ab17d6c3343eaf08eb2702D�G � 14290884418bd83ad4955aa6354b2113950b766239244a06bee2f2a364ba608fD�F � f901d903838a840af4b07b7405171f08944a919391efff75f782b9d2c5a6a8a7D�E � ca22627ed1921f923bf0d6590573bb115ae89ab16f2cd8439ca78680ac859464D�D � 3db947e6e862b89a0ca5b23880b8c910b68d3c16831d17f914d62706e4e337dbD�C � f6eec5c1e694fd7e8232482c537de9cd0baf38de7afc7c99fee2ddf4b248488dD�B � 8d2234f4b3652ffa6caf553d843f040d43d53c10ec6156b8de9fbd3efb4aef2cD�A � 6a2fc5bcfdf2c8ed011976da11bfa2c4e64084e1f45d265f784bcd58fbece989 8 `��" � 8 ^��gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���i�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��i�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762��� i�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560 � ��1 � ��� i�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560��� i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��i�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���g�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159��� i�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t�� i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-�� i�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���i�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��i�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���g�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���i�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��i�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ��� i�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560��� i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K�� i�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���g�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 NU�: � ��#q�K �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651���"i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���!i�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t�� i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-�� i�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � c� � ��%q�' �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556���$q�A �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651 L L �/��&q�o �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��)q�q �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��(q�} �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��'q�s �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 +>� ���-q�A �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}��,q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��+q�a �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��*q�1 �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��.q�' �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��/q�o �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��2q�q �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��1q�} �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��0q�s �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 " +>�" ���6q�= �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��5q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��4q�a �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��3q�1 �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��7q�' �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��8q�o �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��;q�q �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��:q�} �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��9q�s �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 +>�" � |��Am� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726���@q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905���?q�= �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��>q� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��=q�a �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��<q�1 �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 bR "�RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ "&�� "'�� "+�� "-�� ".�� "/�� "0�� "1�� "2��" "3��) "4��/ "5��6 "6��< "7��B "8��I "9��P ":��V ";��] "<��c "=��i ">��n "?��t "@��y "A�� "C�� "D�� "E�� "F�� "G�� "H�� "I��# "J��% "K��& "L��) "M��- "N��. "O��/ "P��2 "Q��6 "R��7 "S��8 "T��; "U��A "W��H "X��O "Y��V "Z��] "[��d "\��k "]��r "^��y "_�� "a�� "b�� "c�� "d�� "e��# "f��* "g��1 "h��8 "i��? "j��F "k��M "l��T "m��[ "n��b "o��i "p��p "q��w "r��~ "t�� "u�� "v�� "w�� "x��! "y��( "z��/ "{��6 "|��= "}��D "~��K "��R "���Y "���` "���g "���n "���u "���| "��� "��� "��� "��� "��� "��� "���% "���* "���/ "���4 � ��v � � ��Hm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Gm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Fmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Ema �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��Dm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Cm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��Bm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927 � }�x�n � � e��Oma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��Nm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Mm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��Lm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��Km� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��Jm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Im� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 r ��| � r ���Vm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��Um� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��Tm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Sm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Rm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Qm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Pmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126 � �� � � � ��]m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��\m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��[m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Zm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Ymu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Xma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��Wm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506 { g�]�t { ���dm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��cmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��bma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��am� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���`m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��_m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927���^m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599 � }�u�\ � � o��kmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��jma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��im� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���hm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��gm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��fm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��em� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 9 z�t�V � 9 ���ri� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���qi�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���pm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��om� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��nm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��mm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���lm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 � �� � � � ��ym� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��xm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��wm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���vm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��umu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��tma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��sm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506 e g�J�n � e �� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��~mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��}ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���|i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���{i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���zm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599 e �r+��V��: � � e D�Z � 79effda42d229dffeed9ec2dc1067ea15c3d1895c9bdfe9d24064abaa134d7a7D�Y � 82f169e42c36e9579026a6d56d46f2cbe59221a611192fe96b613ff527e57a1cD�X � 8c1afba082bedaba9392d11b613759a65431711c73e71af2ca4c1d2710b71ac5D�W � 0b514834510f57ab09a2051d0b0c2be8a61777452ad125d1b3e5e90abeb6fa22D�V � f7291bdf6020187d7cf5369c95f16faeef861f866ffc8c46c03116ea2adf9092D�U � 617fff79ce97ec5ee66c7f45cec546ea2429f9ce776263cf40a0b246665913e1D�T � cf61322c3e87c6c21ad8be1051fa2d235337e2a97a9a894828a70e5cd12a2254D�S � 03cf1dde125c19d5d48038e69f3552a4973548aa09dc383debd850eec84fa1a4D�R � 56773da33ba948469db1f7ab9d9bc267d2e29b3458b2d1376573c09525ad4581D�Q � f89d39e2f15a5f9de6ac154edd1ca68886b384c0e12ef5657eb722c92e9c0788D�P � 789245b54d2cc37181b3209ca55431722601a4544e987a98c0953c1b64660406D�O � b3cdcec7059a05b036622e2b2326259602d28b19672e0fe8766f1b0c59537bc9D�N � fbc2fabe0f2dd520e1af93518f0669fbb0c91b469d7508a7402404cbbea73b6d J }�_�B � J e��ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726� ��i�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 M ��| � M ���i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319��� m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� �� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492�� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492�� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126 w y�j�` � w e��ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��i�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163 | ��| � | |�� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126 � v��� � ��#m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��"m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���!m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o�� mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e�� ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|�� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506��� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347 � {�q�� � ���*m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��)mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��(ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��'m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���&m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��%m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��$m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 R }�u�\ � R |��1m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���0m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��/m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927���.m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��-m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��,m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��+m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 z �$�� z ���8m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��7m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��6m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��5m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���4m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��3mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��2ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726 � �� � � � ��?m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��>m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��=m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���<m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��;mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��:ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��9m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506 h g�J�a � h ���Fm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Emu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Dma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��Cm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���Bi� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���Ai�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���@m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599 V }�u�F � V e��Mma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���Li� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���Ki�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���Jm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��Im� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Hm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Gm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 M ��| � M ���Ti�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���Sm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��Rm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Qm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Pm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Om� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Nmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126 � y��� � ��[m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Zm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Ym� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Xmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��Wma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726� ��Vi�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���Ui� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163 6 {�L�6 � 6 |��bm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��am� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��`i�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���_i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���^i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���]m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��\m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 � v��� � ��im� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��hm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���gm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��fmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��ema �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��dm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���cm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347 � {�q�� � ���pm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��omu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��nma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��mm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���lm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��km� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��jm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 � }�u�\ � � o��wmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��vma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��um� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���tm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��sm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��rm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��qm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 9 z�t�V � 9 ���~i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���}i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���|m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��{m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��zm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��ym� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���xm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 e �r+��V��: � � e D�g � caf7f0adf042b63657e0610f87dbb3aa3334f9a81292aa836ddc648117954f9dD�f � 81bcb4324bc25258c6e46c0bdc146842422c22344fda2af0164660b98db7c0dcD�e � 249e4941a5a5071a668ba290a7dc5e28013fd43206a9a9b2a2a236220aee04ddD�d � 8398bd6b079096f5128dc71162f6fb902418319a1f157c08cd55e55ea7b42815D�c � 9f8bb077bbb9a1599bd7dfb6b7973517ca6a23674134edc3822c31d459a0fcf0D�b � ea48b9fb3553584f758b7a3b5b3689740e4d04e82eb6d0359b8fecbde72b9b23D�a � 87aee3a9528b247730a778c50eab6e97da58d331049a063fa5f651d993db29d5D�` � 63c82c1e8917281adf931c995b90cce5c368fb95285f2659b691785c1fdd6a86D�_ � 2da57e3f11f7feb8e50c18578d16794bb2a9a020b5c7c2a5ed12d4c49a0e597dD�^ � 180fe822e8d8229970daac8f8d746b4a0b83877121f93490003022ee941544c1D�] � 9d8090a78aa40baa54d3800a01ae8e374a61c7be5587eb90bc2cf279a1c29e2eD�\ � 196df95b9b19a08f79321b9b3709379e9fbdf71dd5cdc4d74bd313d84468f412D�[ � b64165d72cf869748c81b8e41581c93b8354747c22d548ae910ab54e118a90a5 z �$�� z ���m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o�� mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726 J j�T�T � J |�� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506��� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|�� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|�� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��i�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319 � �$�� � |��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e�� ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726 � v��� � ��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347 } {�b�� } ��!m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o�� mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e�� ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|�� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506��� m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 f }�_�B � f o��(mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��'ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���&i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���%i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���$m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��#m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��"m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 9 z�t�V � 9 ���/i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���.i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���-m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��,m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��+m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��*m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���)m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 � q�q�g � � o��6mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��5ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��4m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���3m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��2m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��1m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��0i�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961 e z�t�o � e |��=m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���<m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��;m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��:m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��9m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��8m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���7m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 z �$�� z ���Dm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��Cm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Bm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Am� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���@m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��?mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��>ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726 � �� � � � ��Km� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Jm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Im� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Hm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Gmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Fma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��Em� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506 e g�J�n � e ��Rm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Qm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Pmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��Oma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���Ni� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���Mi�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���Lm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599 3 }�_�B � 3 |��Ym� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��Xi�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���Wi� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���Vi�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���Um�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��Tm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Sm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 � ��v � � ��`m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���_m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��^mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��]ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��\m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���[m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��Zm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927 � }�x�n � o��gmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��fma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��em� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���dm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��cm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��bm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��am� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 m z�t�V � m e��nma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��mm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���lm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��km� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��jm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��im� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���hm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 M ��| � M ���ui�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���tm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��sm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��rm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��qm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���pm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��omu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126 � y�� � � ��|m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��{m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��zm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���ym� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��xmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��wma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���vi� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163 � g�J�: � � ��{�C �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36Y��- Fix setting terminal foreground process group while resuming process Resolves: #1457990}��{� �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-35Y��- Fix warning while creating kia file Resolves: #1438045� �� i�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���~i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���}m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599 e �r+��V��: � � e D�t � e377bae670c12638d474197ef518748c1e088342df7e30d7b48305b688397f86D�s � cadd165d38724eb665db004d9c8b750aecb7c5d88cafaecac40cf6bd136bc3b9D�r � 61f2ce61f188dc44b4bac40752a37aceb51e5ab3ad31e9832585553728f1153aD�q � 5475ede3cff8776a20cbf47c4b3c85074267733ee7b25756385442d60aa680c8D�p � 350bcc459207279a04b2e6c772304349c7c5d63b58f4b52efe0c5856681203c4D�o � d83df69f3f8696e0c3baee4eb2d4a692612706bad980d06d71759195aefe28a4D�n � f51bb9d1fa63c5bb467fc5024de79c68a580bffb93e0ee00dad4ffd1edfb0dc6D�m � 6e73c8cf692c96778253ff1dcfb1fa2fbff0c5bd4b3bb64b10dd7cc1b5edc4acD�l � 3bba9df9a126294f1b6d125afef0399b652648e92446de453d3f9aa966726dc7D�k � 8717e76e453ff6da56721f14fb3f66a602f200c27eb0d7730ad11ad9f0e696c4D�j � 7f527d338cce3e1cb86323b7257ae02c7e130d6c37bc6ff07f75a20ad82a2e25D�i � 86b8329276455f1ab7137f0bfbed2c18288a75bb75932393695583ae82613063D�h � 09c46bafc8f7871f9037631642128c520e108bc7b90ffdfffbd477c7ea27543e � T�+�0 � �'��}�S �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-141^0"@- Do not evaluate arithmetic expressions from environment variables at startup Resolves: #1790544{��}} �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-140]S��- Add virtual provides for /bin/ksh Resolves: #1690042x��}w �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-139[ �@- Fix a crash caused by memcmp() Resolves: #1546749���}� �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-138[@- Fix a crash due to out of bounds write Resolves: #1506347� ��i�U �Kamil Dudka <kdudka@redhat.com> - 20120801-137Z��- Increase the release number by 100 to make sure it stays higher than in RHEL-6 Related: #1484937�'��{�U �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37Zhu@- Add configuration option to enable signal bubbling for backward compatibility Resolves: #1484937 * � {�, � * x��}w �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-139[ �@- Fix a crash caused by memcmp() Resolves: #1546749���}� �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-138[@- Fix a crash due to out of bounds write Resolves: #1506347� �� i�U �Kamil Dudka <kdudka@redhat.com> - 20120801-137Z��- Increase the release number by 100 to make sure it stays higher than in RHEL-6 Related: #1484937�'�� {�U �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37Zhu@- Add configuration option to enable signal bubbling for backward compatibility Resolves: #1484937� �� {�C �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36Y��- Fix setting terminal foreground process group while resuming process Resolves: #1457990n�� {e �Vincent Mihalkovic <vmihalko@redhat.com> - 20120801-143aV�@- Stack robustness fixes Related: #2007364l�� }_ �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-142^J�@- Bump version number Related: #1790544 3 ��e�u 3 �[��g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129z��{} �Vincent Mihalkovic <vmihalko@redhat.com> - 20120801-144b �- Stack robustness additional fixes Resolves: #2053503n��{e �Vincent Mihalkovic <vmihalko@redhat.com> - 20120801-143aV�@- Stack robustness fixes Related: #2007364l��}_ �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-142^J�@- Bump version number Related: #1790544�'��}�S �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-141^0"@- Do not evaluate arithmetic expressions from environment variables at startup Resolves: #1790544{��}} �Siteshwar Vashisht <svashisht@redhat.com> - 20120801-140]S��- Add virtual provides for /bin/ksh Resolves: #1690042 � h�q � �-��i�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���i�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��i�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���g�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[�� g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^�� gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129��� i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159��� i�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t�� i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��%i�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���$i�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���#i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��"i�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���!g�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��*g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��)gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���(i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���'i�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��&i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��/i�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���.i�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���-i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��,i�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���+g�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��4g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��3gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���2i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���1i�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��0i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��9i�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���8i�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���7i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��6i�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���5g�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��>g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��=gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���<i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���;i�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��:i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��Ci�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���Bi�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Ai� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��@i�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���?g�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��Hg�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��GgY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���Fi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Ei�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Di� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��Mi�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���Li�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Ki� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��Ji�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���Ig�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��Rg�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��QgY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���Pi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Oi�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Ni� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��Wi�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���Vi�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Ui� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��Ti�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���Sg�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��\g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��[gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���Zi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Yi�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Xi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��ai�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���`i�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���_i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��^i�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���]g�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��fg�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��egY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���di� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���ci�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��bi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��ki�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���ji�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���ii� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��hi�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���gg�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��pg�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��ogY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���ni� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���mi�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��li� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��ui�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���ti�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���si� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��ri�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���qg�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 # t�( � # d��{ak �John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1 Resolves: #1310860���za�Q �John Dennis <jdennis@redhat.com> - 2.5.0-1U�6@- Rebase to upstream, now includes our ECP patches, no need to patch any more Resolves: #1205342�?��ya� �John Dennis <jdennis@redhat.com> - 2.4.1-8U�@- Add explicit minimum dependency on glib2 2.42, for some reason RPM is not automatically detecting the dependency Resolves: #1254989���xi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���wi�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��vi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 M s�M �5��~c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6��- Resolves: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�g��}c�m �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed instead of response���|a�1 �John Dennis <jdennis@redhat.com> - 2.5.1-2Wc�@- Rebase to upstream 2.5.1 Resolves: #1310860 - add validate_idp_list_test patch � I� � �q��c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�;�� c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`�r�- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�2��c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik�- Resolves: #1719014 - Expired certificate prevents tests from running - Actually apply the patch file for the previous build - Related: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors � F�A � ���a�1 �John Dennis <jdennis@redhat.com> - 2.5.1-2Wc�@- Rebase to upstream 2.5.1 Resolves: #1310860 - add validate_idp_list_test patchd��ak �John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1 Resolves: #1310860���a�Q �John Dennis <jdennis@redhat.com> - 2.5.0-1U�6@- Rebase to upstream, now includes our ECP patches, no need to patch any more Resolves: #1205342�?��a� �John Dennis <jdennis@redhat.com> - 2.4.1-8U�@- Add explicit minimum dependency on glib2 2.42, for some reason RPM is not automatically detecting the dependency Resolves: #1254989�q��c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses e �r+��V��: � � e D� � 9d8f852847d542b8ca3a8f7afddddd363dfd43bfa65cfbf6dfc8aa04498417daD� � c053243ee1cb35d96150add59e7a1c0861276f5b2a3a9ca734501801a605c029D� � fdbe2525e655b8cf975f2027191bcc9231946f75aa3196dd6bc68d144b98da20D�~ � a95d1f4bc03b57d5bf45411152deb77c11b8f7e7eea468e1ac9786e41c70b339D�} � 2a27d4cd848272f9c9e4251b28efc591660799054bcd62d321892c0a8a608f9dD�| � 232113158f29ca0be28b87fea599e2ceb671ea597d510b952fa9490d78950783D�{ � e08f5391f6f27a9c77207532b12000e6771dbbab3411de893ea6640343d7c557D�z � 27258fffe6d62545a0a0c40b4e07b0f92e1a3b79588415f8f1242624918720bcD�y � 67364ca692de365478eee5a94879717c1fae2b7a4ba46d128ec04f0477c8c2b5D�x � 0ff1974a6100b7f2cbd7eed090daafd948fcf3710a299e3b612fb23e609059deD�w � 82146c665ec6adb6b5a44f5163ac78834431f9d37ddbeee4cc990634d979481bD�v � 41389a794b7cc04dd2e3fd21ff891d278296ee4aefdfda8491c6075a8b52e2d7D�u � dc77ee42e3378dfc1bde015704e9af335bd8e6829d547325da2fc62adc0db229 # � # �2�� c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik�- Resolves: #1719014 - Expired certificate prevents tests from running - Actually apply the patch file for the previous build - Related: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�5��c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6��- Resolves: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�g��c�m �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed instead of response � @JT � �?�� a� �John Dennis <jdennis@redhat.com> - 2.4.1-8U�@- Add explicit minimum dependency on glib2 2.42, for some reason RPM is not automatically detecting the dependency Resolves: #1254989�q�� c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�q�� c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�;�� c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`�r�- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses H c�n� H �5��c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6��- Resolves: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�g��c�m �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed instead of response���a�1 �John Dennis <jdennis@redhat.com> - 2.5.1-2Wc�@- Rebase to upstream 2.5.1 Resolves: #1310860 - add validate_idp_list_test patchd��ak �John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1 Resolves: #1310860���a�Q �John Dennis <jdennis@redhat.com> - 2.5.0-1U�6@- Rebase to upstream, now includes our ECP patches, no need to patch any more Resolves: #1205342 � I� � �q��c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�;��c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`�r�- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�2��c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik�- Resolves: #1719014 - Expired certificate prevents tests from running - Actually apply the patch file for the previous build - Related: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors � F�A � ���a�1 �John Dennis <jdennis@redhat.com> - 2.5.1-2Wc�@- Rebase to upstream 2.5.1 Resolves: #1310860 - add validate_idp_list_test patchd��ak �John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1 Resolves: #1310860���a�Q �John Dennis <jdennis@redhat.com> - 2.5.0-1U�6@- Rebase to upstream, now includes our ECP patches, no need to patch any more Resolves: #1205342�?��a� �John Dennis <jdennis@redhat.com> - 2.4.1-8U�@- Add explicit minimum dependency on glib2 2.42, for some reason RPM is not automatically detecting the dependency Resolves: #1254989�q��c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses # � # �2�� c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik�- Resolves: #1719014 - Expired certificate prevents tests from running - Actually apply the patch file for the previous build - Related: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�5�� c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6��- Resolves: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�g��c�m �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed instead of response � @JT � �?��!a� �John Dennis <jdennis@redhat.com> - 2.4.1-8U�@- Add explicit minimum dependency on glib2 2.42, for some reason RPM is not automatically detecting the dependency Resolves: #1254989�q�� c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�q�� c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�;�� c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`�r�- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses H c�n� H �5��&c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6��- Resolves: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�g��%c�m �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed instead of response���$a�1 �John Dennis <jdennis@redhat.com> - 2.5.1-2Wc�@- Rebase to upstream 2.5.1 Resolves: #1310860 - add validate_idp_list_test patchd��#ak �John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1 Resolves: #1310860���"a�Q �John Dennis <jdennis@redhat.com> - 2.5.0-1U�6@- Rebase to upstream, now includes our ECP patches, no need to patch any more Resolves: #1205342 � I� � �q��)c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�;��(c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`�r�- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�2��'c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik�- Resolves: #1719014 - Expired certificate prevents tests from running - Actually apply the patch file for the previous build - Related: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors A � b � A v��/c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase�"��.c�c �Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1Y�M�- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to version 4.7.x�#��-e�c �Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X��@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to version 4.6.xr��,e� �Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26���+e�' �Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1V�b�- Rebase libldb to 1.1.25 - Remove upstreamed patches - Related: rhbz#1322691�q��*c� �Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses � � ��` � ���6i�5 �Fridolin Pokorny <fpokorny@redhat.com> - 458-2Qf��- Added gpg support to lesspipe.sh (#885122) - Added ~/.lessfilter support (#885122)H��5i+ �Fridolin Pokorny <fpokorny@redhat.com> - 458-1Qf��- Update to 458`��4e_ �Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y�@- resolves: #1941511 - Fix CVE-2021-20277z��3c� �Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B�@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz��2c� �Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? �- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambav��1c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��0c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z�- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase .�� � �(��=[�w �Jozef Mlich <jmlich@redhat.com> - 458-9U]�- The --use-backslash option documented in the man page was missing from online help for less. Resolves: #1109090�7��<[� �Jozef Mlich <jmlich@redhat.com> - 458-8R�- changes introduced in less-458-old-bot-in-help.patch wasn't compiled in. It is necessary to use mkhelp tool. Resolves: #948597J��;Y? �Daniel Mach <dmach@redhat.com> - 458-7R�U�- Mass rebuild 2014-01-24J��:Y? �Daniel Mach <dmach@redhat.com> - 458-6R�k�- Mass rebuild 2013-12-27�2��9[� �Jozef Mlich <jmlich@redhat.com> - 458-5R�v@- fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6 incorrect parsing of commandline arguments - Resolves #948597X��8]W �Ondrej Vasik <ovasik@redhat.com> - 458-4Qޞ@- apply the --old-bot patch (#983167)�M��7i�3 �Fridolin Pokorny <fpokorny@redhat.com> - 458-3Q��- Expanded lessecho usage (#948597) - Added lessfilter info to man (#948597) - Expanded lesskey usage (#948597) - Added --old-bot to help (#948597) B �'�[ � B � ��C=�W �Michal Ruprich - 4.4.8-9X l�- Resolves: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp���Bk�# �Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-8W4p@- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror���Ak�% �Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-7U~�@- Fixed issue with absolute URL locations in mirror mode - Related: #1181580�;��@k� �Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6US<�- Fix lftp does not follow http redirect (302) in mirror mode (#1181580) - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984) - Added RFE - lftp configurations for restricting each SSL/TLS version (#1182987) - Fixed bogus dates of this SPECp��?i{ �Lubos Uhliarik <luhliari@redhat.com> - 4.4.8-5UQ�@- Fix option xfer:auto-rename not documented (#1035229)a��>cc �Matej Mužila <mmuzila@redhat.com> - 458-10f'��- Fix CVE-2024-32487 - Resolves: RHEL-32802 M -R� � M � ��Hk�- �Michal Ruprich <mruprich@redhat.com> - 4.4.8-14c:�- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7�;��Gk� �Michal Ruprich <mruprich@redhat.com> - 4.4.8-13^9\�- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated�0��Fk�w �Michal Ruprich <mruprich@redhat.com> - 4.4.8-12]8H@- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased�V��Ek�C �Michal Ruprich <mruprich@redhat.com> - 4.4.8-11Z���- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries' - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries�N��D?�_ �Michal Ruprich - 4.4.8-10X)�@- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp - Patch edited so that it corresponds to upstream � �L�5 � � ��M=�W �Michal Ruprich - 4.4.8-9X l�- Resolves: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp���Lk�# �Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-8W4p@- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror���Kk�% �Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-7U~�@- Fixed issue with absolute URL locations in mirror mode - Related: #1181580�;��Jk� �Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6US<�- Fix lftp does not follow http redirect (302) in mirror mode (#1181580) - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984) - Added RFE - lftp configurations for restricting each SSL/TLS version (#1182987) - Fixed bogus dates of this SPECp��Ii{ �Lubos Uhliarik <luhliari@redhat.com> - 4.4.8-5UQ�@- Fix option xfer:auto-rename not documented (#1035229) M -R� � M � ��Rk�- �Michal Ruprich <mruprich@redhat.com> - 4.4.8-14c:�- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7�;��Qk� �Michal Ruprich <mruprich@redhat.com> - 4.4.8-13^9\�- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated�0��Pk�w �Michal Ruprich <mruprich@redhat.com> - 4.4.8-12]8H@- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased�V��Ok�C �Michal Ruprich <mruprich@redhat.com> - 4.4.8-11Z���- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries' - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries�N��N?�_ �Michal Ruprich - 4.4.8-10X)�@- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp - Patch edited so that it corresponds to upstream � �L�5 � � ��W=�W �Michal Ruprich - 4.4.8-9X l�- Resolves: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp���Vk�# �Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-8W4p@- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror���Uk�% �Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-7U~�@- Fixed issue with absolute URL locations in mirror mode - Related: #1181580�;��Tk� �Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6US<�- Fix lftp does not follow http redirect (302) in mirror mode (#1181580) - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984) - Added RFE - lftp configurations for restricting each SSL/TLS version (#1182987) - Fixed bogus dates of this SPECp��Si{ �Lubos Uhliarik <luhliari@redhat.com> - 4.4.8-5UQ�@- Fix option xfer:auto-rename not documented (#1035229) M -R� � M � ��\k�- �Michal Ruprich <mruprich@redhat.com> - 4.4.8-14c:�- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7�;��[k� �Michal Ruprich <mruprich@redhat.com> - 4.4.8-13^9\�- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated�0��Zk�w �Michal Ruprich <mruprich@redhat.com> - 4.4.8-12]8H@- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased�V��Yk�C �Michal Ruprich <mruprich@redhat.com> - 4.4.8-11Z���- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries' - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries�N��X?�_ �Michal Ruprich - 4.4.8-10X)�@- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp - Patch edited so that it corresponds to upstream P �V�~9�] � P X��fiK �Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��e]w �Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��d]) �Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��c]q �Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��bqq �Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��a]) �Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��`q[ �Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��_qk �Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��^qU �Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A��]]) �Adam Jackson <ajax@redhat.com> - 1.6.4-1W��@- libX11 1.6.4 P �V�~9�] � P X��piK �Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��o]w �Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��n]) �Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��m]q �Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��lqq �Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��k]) �Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��jq[ �Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��iqk �Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��hqU �Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A��g]) �Adam Jackson <ajax@redhat.com> - 1.6.4-1W��@- libX11 1.6.4 ? �+�~ �] � � ? R��z]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��yiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��x]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��w]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��v]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��uqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��t]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��sq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��rqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��qqU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts() ? �+�~ �] � � ? R��]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e�� ]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��~]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��}q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��|qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��{qU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts() e �r+��V��: � � e D� � de55e1ddb71f75f5b701d57786cf4b70fee1d92f72205d32c353fe0e17602361D� � e5f76a4c5b41b3334ed3da7aa9bf17480ddf89e174661aaa2d61a1fe4efc7ad4D� � 374f721b5f41a11a081cd23537162130ab654a02ece3e8c55f3840ecd8f839a0D� � 1ef57080cad8889aa2a957bb771d161af38b61bf4aec83a7fcd19e2dfe510079D� � 938bca67aabbf5f68ed289ef571582f9e1c3c144f27c0cc38dc3b60c03bb184eD� � a11e1ecb8f7034384a2138c08abe5aa5f4f9996c624112e951eb5a42353bc197D� � 1cd870f8b1c30e2f168c6960a8dde4ac59970a62aca538042b33d37a679f1a3bD� � e033e09baf35ab533a503e8e87c8e01aae28de712da982f5371673bf0567fa4aD� � 70bbd71ba6462d9f6702322739a79ddf57ab8a23f41a3ae1e2c47feacb60d0d1D� � 2c6eb5afea1c0a0fa2d5103b42a1dfd64c5d9d81d7974ab2bf5adbf20f29033aD� � c5210f6bcc42e5949db2d2f133a369159d73a960cf7abe1a47a4248fe1d48491D� � 1f4f286b0441b2c508c416f72ee52c1b323a1ba12aae4579f986c007ecde653fD� � 3e22c1e91e6c946f60aaa437911042d67c7e9de92d77cf458a51d5660658186c ! �(�p�V � � ! ��k� Olivier Fourdan <ofourdan@redhat.com> - 1.6.7-5e��- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)R�� ]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X�� iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h�� ]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA�� ]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e�� ]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 ! �(�p�V � � ! ��k� Olivier Fourdan <ofourdan@redhat.com> - 1.6.7-5e��- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)R��]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 P �V�~9�] � P X��"iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��!]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA�� ]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e�� ]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo�� qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A�� ]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d�� q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��qU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A��]) Adam Jackson <ajax@redhat.com> - 1.6.4-1W��@- libX11 1.6.4 ? �+�~ �] � � ? R��,]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��+iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��*]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��)]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��(]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��'qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��&]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��%q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��$qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��#qU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts() ! �(�p�V � � ! ��6k� Olivier Fourdan <ofourdan@redhat.com> - 1.6.7-5e��- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)R��5]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��4iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��3]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��2]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��1]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��0qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��/]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��.q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��-qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 bR "�RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ "���> "���C "���H "���M "���R "���W "���\ "���a "���f "���k "���p "���u "���{ "���~ "��� "��� "��� "��� "��� "��� "��� "��� "���! "���& "���) "���/ "���6 "���= "���C "���H "���M "���R "���W "���\ "���f "���p "���z "��� "��� "��� "���" "���, "���6 "���@ "���J "�T "Á�^ "ā�h "Ł�r "Ɓ�y "ǁ� "ȁ� "ʁ� "ˁ� "́� "́� "�# "ρ�( "Ё�+ "с�- "ҁ�2 "Ӂ�5 "ԁ�7 "Ձ�< "ց�? "ׁ�A "�H "ف�Q "ځ�Z "ہ�c "܁�k "݁�q "ށ�v "߁�~ "�� "�� "�� "�� "�� "��# "��( "��/ "��4 "��: "��= "��> "��A "��E "��G "��H "��K "��O "��P "��Q "���T "���Y "���Z "���[ P �V�~9�] � P X��@iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��?]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��>]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��=]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��<qq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��;]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��:q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��9qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��8qU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A��7]) Adam Jackson <ajax@redhat.com> - 1.6.4-1W��@- libX11 1.6.4 P �V�~9�] � P X��JiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��I]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��H]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��G]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��Fqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��E]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��Dq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��Cqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��BqU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A��A]) Adam Jackson <ajax@redhat.com> - 1.6.4-1W��@- libX11 1.6.4 ? �+�~ �] � � ? R��T]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��SiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��R]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��Q]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��P]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��Oqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��N]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��Mq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��Lqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��KqU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts() ? �+�~ �] � � ? R��^]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��]iK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��\]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��[]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��Z]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��Yqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��X]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��Wq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��Vqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��UqU Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts() ! �(�p�V � � ! ��hk� Olivier Fourdan <ofourdan@redhat.com> - 1.6.7-5e��- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)R��g]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��fiK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��e]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��d]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��c]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��bqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��a]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��`q[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��_qk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 ! �(�p�V � � ! ��rk� Olivier Fourdan <ofourdan@redhat.com> - 1.6.7-5e��- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)R��q]K Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��piK Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��o]w Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��n]) Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��m]q Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��lqq Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��k]) Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��jq[ Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��iqk Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 � � �'�- � ���y�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildZ��x[] Adam Jackson <ajax@redhat.com> 3.5.11-1R�b@- libXpm 3.5.11 - Drop pre-F18 changelog���w�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildX��vw= Peter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8�@- autoreconf for aarch64���u�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���t�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildA��s[+ Adam Jackson <ajax@redhat.com> 3.5.10-1OX�@- libXpm 3.5.10 � a|7� � � X�� w= Peter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8�@- autoreconf for aarch64����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���~�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildA��}[+ Adam Jackson <ajax@redhat.com> 3.5.10-1OX�@- libXpm 3.5.10���|w� Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c�0�- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V��{�+ Benjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X��@- libXpm 3.5.12���z�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild � dj�q � � A��[+ Adam Jackson <ajax@redhat.com> 3.5.10-1OX�@- libXpm 3.5.10���w� Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c�0�- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V���+ Benjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X��@- libXpm 3.5.12����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildZ��[] Adam Jackson <ajax@redhat.com> 3.5.11-1R�b@- libXpm 3.5.11 - Drop pre-F18 changelog����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild e �r+��V��: � � e D� � faea0d6adefaa474577c184f31a44469d13846a44412ea382dafc9f9ea6a3a77D� � 4ad0b71e3a6468fba1b43ab82fad024415b5296c7b77d1348fb9afa3f828f98eD� � 3054ca1c0cc8eef5f08ce1d3be56c7a39e97d92361e8bd265bea14d06f590219D� � 73952b31447b02abc10d1c2efafb6def58e9237532ddef9eb3a691baaa88a495D� � 6602351182c085c415d4c05b7e325611057898b48cdc1249a54c5106cd0735fdD� � eeec2b53758cdbb0b3f3402b7117dddcf34c40e99612fc0ec69bb799b2a7b6beD� � b9bc38488c309455bbf6f753ef1aaaa244614ec08a027b5ff58a7b234006eac1D� � a687b481be7d8b127fe830b2c0840854683d1ac18a2c1799d5caac56e8891e8fD� � ea09355eb6ee209c2b42e898475fc5462249ee3f27b0dd881ee2fd0db8245464D� � 0eda90367bc11ce10165853be705e1303b3ac2a0f5072131cbd8b2ea6ed2d1eaD� � b856dd2cc821e1fa2cbc89c6901577691af284f98280ef05cc1a7c3826acae41D� � 938bb9ba7be38a8654b48fbbb34f5d8a3a6db6e2453cbe54b8b837c099acb52cD� � 26dd5513dd4b2211aa6f24f32382b86bafd5ff88c0d642448cc8725093a58146 7 d�l�r � 7 ����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild��� �� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildZ�� [] Adam Jackson <ajax@redhat.com> 3.5.11-1R�b@- libXpm 3.5.11 - Drop pre-F18 changelog��� �� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildX�� w= Peter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8�@- autoreconf for aarch64��� �� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild H ��:�B � H Z��[] Adam Jackson <ajax@redhat.com> 3.5.11-1R�b@- libXpm 3.5.11 - Drop pre-F18 changelog����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildX��w= Peter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8�@- autoreconf for aarch64����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildA��[+ Adam Jackson <ajax@redhat.com> 3.5.10-1OX�@- libXpm 3.5.10���w� Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c�0�- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V���+ Benjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X��@- libXpm 3.5.12 L d�k�} L �=�� W�% Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk�� W� Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)���w� Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c�0�- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V���+ Benjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X��@- libXpm 3.5.12����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild����� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild , Sr , �A�� W�- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\�� W�c Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev�(�� W�{ Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login � l� � �a��#W�m Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��"W�_ Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit���!W�I Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent. v �T�# v �(��(W�{ Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��'W�% Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��&W� Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��%Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��$g�# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���+W�I Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��*W�- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��)W�c Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��-W�m Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��,W�_ Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��2W�{ Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��1W�% Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��0W� Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��/Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��.g�# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���5W�I Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��4W�- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��3W�c Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��7W�m Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��6W�_ Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��<W�{ Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��;W�% Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��:W� Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��9Wk Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��8g�# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���?W�I Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��>W�- Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��=W�c Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��AW�m Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��@W�_ Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit [ �i� � � [ L��H]? Daniel Mach <dmach@redhat.com> - 0.6.8-5R�U�- Mass rebuild 2014-01-24L��G]? Daniel Mach <dmach@redhat.com> - 0.6.8-4R�k�- Mass rebuild 2013-12-27� ��Fi� Matthias Clasen <mclasen@redhat.com> - 0.6.8-3Q�5�- Disable strict aliasing, since the code is not strict-aliasing-clean���E�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJ��Di/ Kalev Lember <kalevlember@gmail.com> - 0.6.8-1P��@- Update to 0.6.8J��Ci/ Kalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7�D��Bg�# Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] P �:�\�% � P L��Q]? Daniel Mach <dmach@redhat.com> - 0.6.8-4R�k�- Mass rebuild 2013-12-27� ��Pi� Matthias Clasen <mclasen@redhat.com> - 0.6.8-3Q�5�- Disable strict aliasing, since the code is not strict-aliasing-clean���O�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJ��Ni/ Kalev Lember <kalevlember@gmail.com> - 0.6.8-1P��@- Update to 0.6.8J��Mi/ Kalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7n��Luk Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'�A- Rebuild with 7.9-z target Related: #1835951h��Ku_ Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'�@- Fix CVE-2020-12825 Resolves: #1835951`��Ji[ Richard Hughes <rhughes@redhat.com> - 0.6.12-4X�-�- Update to 0.6.12 - Resolves: #1569991^��Ie[ Kalev Lember <klember@redhat.com> - 0.6.11-1Vr��- Update to 0.6.11 - Resolves: #1386999 P �N�~ �p � P � ��Zi� Matthias Clasen <mclasen@redhat.com> - 0.6.8-3Q�5�- Disable strict aliasing, since the code is not strict-aliasing-clean���Y�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJ��Xi/ Kalev Lember <kalevlember@gmail.com> - 0.6.8-1P��@- Update to 0.6.8J��Wi/ Kalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7n��Vuk Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'�A- Rebuild with 7.9-z target Related: #1835951h��Uu_ Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'�@- Fix CVE-2020-12825 Resolves: #1835951`��Ti[ Richard Hughes <rhughes@redhat.com> - 0.6.12-4X�-�- Update to 0.6.12 - Resolves: #1569991^��Se[ Kalev Lember <klember@redhat.com> - 0.6.11-1Vr��- Update to 0.6.11 - Resolves: #1386999L��R]? Daniel Mach <dmach@redhat.com> - 0.6.8-5R�U�- Mass rebuild 2014-01-24 � �`��.�n � ���c�� Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJ��bi/ Kalev Lember <kalevlember@gmail.com> - 0.6.8-1P��@- Update to 0.6.8J��ai/ Kalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7n��`uk Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'�A- Rebuild with 7.9-z target Related: #1835951h��_u_ Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'�@- Fix CVE-2020-12825 Resolves: #1835951`��^i[ Richard Hughes <rhughes@redhat.com> - 0.6.12-4X�-�- Update to 0.6.12 - Resolves: #1569991^��]e[ Kalev Lember <klember@redhat.com> - 0.6.11-1Vr��- Update to 0.6.11 - Resolves: #1386999L��\]? Daniel Mach <dmach@redhat.com> - 0.6.8-5R�U�- Mass rebuild 2014-01-24L��[]? Daniel Mach <dmach@redhat.com> - 0.6.8-4R�k�- Mass rebuild 2013-12-27 � {+�y�7 � ���kc�+ Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)n��juk Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'�A- Rebuild with 7.9-z target Related: #1835951h��iu_ Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'�@- Fix CVE-2020-12825 Resolves: #1835951`��hi[ Richard Hughes <rhughes@redhat.com> - 0.6.12-4X�-�- Update to 0.6.12 - Resolves: #1569991^��ge[ Kalev Lember <klember@redhat.com> - 0.6.11-1Vr��- Update to 0.6.11 - Resolves: #1386999L��f]? Daniel Mach <dmach@redhat.com> - 0.6.8-5R�U�- Mass rebuild 2014-01-24L��e]? Daniel Mach <dmach@redhat.com> - 0.6.8-4R�k�- Mass rebuild 2013-12-27� ��di� Matthias Clasen <mclasen@redhat.com> - 0.6.8-3Q�5�- Disable strict aliasing, since the code is not strict-aliasing-clean + r�� � + h��qcq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��pc� Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��ocq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j��ncu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}��mc� Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� ��lc�1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292) \ x�u� \ � ��vc�1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)���uc�+ Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)v��ts} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���sc�' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���rc�% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482) . �%�1 � . v��~s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���}c�' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���|c�% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h��{cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��zc� Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��ycq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j��xcu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}��wc� Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) + r�� � + h��cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j��cu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}�� c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� ��c�1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292) E x�u� E � �� c�1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)� ��w�E Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&�- fix HTTP proxy deny use after free (CVE-2022-43552) - rebuild certs with 2048-bit RSA keysv��s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���c�' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���c�% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482) e �r+��V��: � � e D�( � d756103ebb5cdaa112e97017abdb37c31ccacc831f5042c1c0c423e446ab3b8fD�' � d0c60cdd0430a434420ef3cbcd3cd9ebd0e4089f8059b3a3b7bc427c158c0505D�& � cebe503265c9efa9afa036f10cf99ab4d5eeabe4c13950dc76ba50fc4304f4fcD�% � c846a72195e654b76f0ca3467ec6a0e034d1907a307e6d797b1e4238ab8e1949D�$ � 828fe4eb26915648840d50ea3daa571c3735822ed66eced81dd20b12dff3e10eD�# � 4c0432991858f896026445ef401636f12a857102f3329b8a5d034aa2e99e2bd4D�" � 059cd706e5668cb53ab32ca18815011ad932d1853567a29b3c7b2afca689e637D�! � f3dc3c542749f94c4e3a601842a9a8d6311fb735a5d6ee8d3845ce5b137c43eeD� � 2670e3582d71b9a17efc9c2892e66a3c54a3160c71fdf742693ca914289185fcD� � aead54e95d1462dda834e3f40fcfcf9312670076f263f156c631a937038d3b00D� � f92fde3f97c0034135796baa7cd55f87c0550a88ac79adbdcc9c7f64c595614bD� � 7ab4f1b0aa285d3773fdbd8bfc529969ca101a627d3ea88bea1f99a42093e132D� � 34e3369ca1560dc34b862cce4a9fb6a7939494ce15ee0f68fb76edaf5fb3ee53 . �%�1 � . v��s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���c�' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���c�% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h��cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|�� c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h�� cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j�� cu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}�� c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) V ^�E � V j��cu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}��c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� ��c�1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)���c�+ Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)� ��w�E Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&�- fix HTTP proxy deny use after free (CVE-2022-43552) - rebuild certs with 2048-bit RSA keys � �� � � ��� c�+ Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)v�� s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���c�' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���c�% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h��cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436) + r�� � + h��#cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��"c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��!cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j�� cu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}�� c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� �� c�1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292) f x�u � f }��(c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� ��'c�1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)v��&s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���%c�' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���$c�% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482) � �&�:�) � v��/s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���.c�' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���-c�% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h��,cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��+c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��*cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j��)cu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639) u ^�O � u h��4cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j��3cu Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}��2c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� ��1c�1 Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)� ��0w�E Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&�- fix HTTP proxy deny use after free (CVE-2022-43552) - rebuild certs with 2048-bit RSA keys � ��� � � ��:w�E Jacek Migacz <jmigacz@redhat.com> - 7.29.0-59.el7_9.2eJ&�- fix HTTP proxy deny use after free (CVE-2022-43552) - rebuild certs with 2048-bit RSA keysv��9s} Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���8c�' Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���7c�% Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h��6cq Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��5c� Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736) � �A � � ��=q�' !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556���<q�A !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� ��;q�K !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 L L �/��>q�o !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��Aq�q !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��@q�} !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��?q�s !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>� � � ��Eq�K "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651}��Dq� !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��Cq�a !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��Bq�1 !Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � c� � ��Gq�' "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556���Fq�A "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651 L L �/��Hq�o "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��Kq�q "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��Jq�} "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��Iq�s "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 +>� ���Oq�A #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}��Nq� "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��Mq�a "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��Lq�1 "Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��Pq�' #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��Qq�o #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��Tq�q #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��Sq�} #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��Rq�s #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���Yq�A $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651���Xq�= #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��Wq� #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��Vq�a #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��Uq�1 #Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��Zq�' $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��[q�o $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��^q�q $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��]q�} $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��\q�s $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 " +>�" ���bq�= $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��aq� $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��`q�a $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��_q�1 $Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��cq�' %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��dq�o %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��gq�q %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��fq�} %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��eq�s %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���lq� %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905���kq�= %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��jq� %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��iq�a %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��hq�1 %Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��mq�' &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��nq�o &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��qq�q &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��pq�} &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��oq�s &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���vq� &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905���uq�= &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��tq� &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��sq�a &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��rq�1 &Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � �A � � ��yq�' 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556���xq�A 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� ��wq�K 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 L L �/��zq�o 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��}q�q 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��|q�} 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��{q�s 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>� � � ��q�K (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651}�� q� 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��q�a 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��~q�1 'Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � c� � ��q�' (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556���q�A (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651 L L �/��q�o (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��q�q (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��q�} (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��q�s (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 +>� ��� q�A )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}�� q� (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�� q�a (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��q�1 (Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 e �r+��V��: � � e D�5 � 693e3ce2908adefcc2bc524795b6cde949103c699866ca985fd42a827214dd0eD�4 � 946b8442c4a0e72fe683a8d2c6b3ab7143aa27670b547b3ff7849aa236ae494bD�3 � aa74fc65a3e070d797d17ec1a51bec20f0c5a1f1ff74f20bd9459369a3b80568D�2 � 18263e1b0a03802679269ba3b6efec82086ba491183c1ab84bd9de4e5a98c071D�1 � 0c9cd97e333e5ea85907e92483ef91dbdb08349b7e29916dcf5c08061c74f836D�0 � 618179611cd44ba685db172d3afd1dc0248e66533a35b8e46cdf118d812340d3D�/ � 6dafcb9ecc7ca14a4ae5417e71c1fee10a7213e0ebf3d3750cbd23a8cacf5eefD�. � 49776569805f34f9417a664fb394e7bff8444fee386100309ce6306cba1c8b1aD�- � 3bb0da4f1c883b5aaa0ad687bcc2022ba9573d912ff906b6657bc7e96676c5d9D�, � 5c0bed31f5ed7d1cccaeb6276746900d9f0fe837b806759153ea696c3b33b423D�+ � 6337008a1e944b28b17317dcde8003b1ccb848dc5a09a17a27903c4e32e60846D�* � ab2e63b3fe04a633b718c47d41143f7ffa9fb32076d41cfdb01feaef74cd6158D�) � a8bf325bc65d56d5cd74d8b007f3b2f09f0d1f6deccd0c0d0f56f515423fe6eb p p � �� q�' )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/�� q�o )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��q�q )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��q�} )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��q�s )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���q�A *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651���q�= )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��q� )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��q�a )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��q�1 )Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��q�' *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��q�o *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��q�q *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��q�} *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��q�s *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 " +>�" ��� q�= *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�� q� *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�� q�a *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��q�1 *Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � �� q�' +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/�� q�o +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��#q�q +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��"q�} +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��!q�s +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���(q� +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905���'q�= +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��&q� +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��%q�a +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��$q�1 +Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��)q�' ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��*q�o ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��-q�q ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��,q�} ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��+q�s ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���2q� ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905���1q�= ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��0q� ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��/q�a ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��.q�1 ,Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 _ T�� � _ ���7�� -Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���6�� -Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� ��5c�W -Petr Šabata <contyk@redhat.com> - 0.6.21-1P �- 0.6.21 bump - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845) - Drop the pre-generated docs and introduce a doc subpackage���4�� -Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�'��3c�m -Petr Sabata <psabata@redhat.com> - 0.6.20-1M�I@- 0.6.20 bump - Repackaging prehistoric libexif-docs, introducing version string in filename - Buildroot cleanup � �Y�h � ���>�� .Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�'��=c�m .Petr Sabata <psabata@redhat.com> - 0.6.20-1M�I@- 0.6.20 bump - Repackaging prehistoric libexif-docs, introducing version string in filename - Buildroot cleanup���<i�! -Richard Hughes <rhughes@redhat.com> - 0.6.22-2_�@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589g��;u] -Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^��@- Upgrade to 0.6.22 - Resolves: #1841316M��:_? -Daniel Mach <dmach@redhat.com> - 0.6.21-6R�U�- Mass rebuild 2014-01-24M��9_? -Daniel Mach <dmach@redhat.com> - 0.6.21-5R�k�- Mass rebuild 2013-12-27R��8cE -Petr Šabata <contyk@redhat.com> - 0.6.21-4QR�@- Run autoreconf for aarch64 D �C�Q � D g��Eu] .Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^��@- Upgrade to 0.6.22 - Resolves: #1841316M��D_? .Daniel Mach <dmach@redhat.com> - 0.6.21-6R�U�- Mass rebuild 2014-01-24M��C_? .Daniel Mach <dmach@redhat.com> - 0.6.21-5R�k�- Mass rebuild 2013-12-27R��BcE .Petr Šabata <contyk@redhat.com> - 0.6.21-4QR�@- Run autoreconf for aarch64���A�� .Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���@�� .Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� ��?c�W .Petr Šabata <contyk@redhat.com> - 0.6.21-1P �- 0.6.21 bump - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845) - Drop the pre-generated docs and introduce a doc subpackage r w�/ r ���J�� /Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� ��Ic�W /Petr Šabata <contyk@redhat.com> - 0.6.21-1P �- 0.6.21 bump - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845) - Drop the pre-generated docs and introduce a doc subpackage���H�� /Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�'��Gc�m /Petr Sabata <psabata@redhat.com> - 0.6.20-1M�I@- 0.6.20 bump - Repackaging prehistoric libexif-docs, introducing version string in filename - Buildroot cleanup���Fi�! .Richard Hughes <rhughes@redhat.com> - 0.6.22-2_�@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589 0 d�lx � 0 ���R�� 0Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�'��Qc�m 0Petr Sabata <psabata@redhat.com> - 0.6.20-1M�I@- 0.6.20 bump - Repackaging prehistoric libexif-docs, introducing version string in filename - Buildroot cleanup���Pi�! /Richard Hughes <rhughes@redhat.com> - 0.6.22-2_�@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589g��Ou] /Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^��@- Upgrade to 0.6.22 - Resolves: #1841316M��N_? /Daniel Mach <dmach@redhat.com> - 0.6.21-6R�U�- Mass rebuild 2014-01-24M��M_? /Daniel Mach <dmach@redhat.com> - 0.6.21-5R�k�- Mass rebuild 2013-12-27R��LcE /Petr Šabata <contyk@redhat.com> - 0.6.21-4QR�@- Run autoreconf for aarch64���K�� /Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild D �C�Q � D g��Yu] 0Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^��@- Upgrade to 0.6.22 - Resolves: #1841316M��X_? 0Daniel Mach <dmach@redhat.com> - 0.6.21-6R�U�- Mass rebuild 2014-01-24M��W_? 0Daniel Mach <dmach@redhat.com> - 0.6.21-5R�k�- Mass rebuild 2013-12-27R��VcE 0Petr Šabata <contyk@redhat.com> - 0.6.21-4QR�@- Run autoreconf for aarch64���U�� 0Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���T�� 0Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� ��Sc�W 0Petr Šabata <contyk@redhat.com> - 0.6.21-1P �- 0.6.21 bump - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845) - Drop the pre-generated docs and introduce a doc subpackage r w�/ r ���^�� 1Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� ��]c�W 1Petr Šabata <contyk@redhat.com> - 0.6.21-1P �- 0.6.21 bump - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845) - Drop the pre-generated docs and introduce a doc subpackage���\�� 1Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�'��[c�m 1Petr Sabata <psabata@redhat.com> - 0.6.20-1M�I@- 0.6.20 bump - Repackaging prehistoric libexif-docs, introducing version string in filename - Buildroot cleanup���Zi�! 0Richard Hughes <rhughes@redhat.com> - 0.6.22-2_�@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589 � d�lx � � ��ee�1 2Lukas Nykryn <lnykryn@redhat.com> - 219-73.1]�@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)���di�! 1Richard Hughes <rhughes@redhat.com> - 0.6.22-2_�@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589g��cu] 1Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^��@- Upgrade to 0.6.22 - Resolves: #1841316M��b_? 1Daniel Mach <dmach@redhat.com> - 0.6.21-6R�U�- Mass rebuild 2014-01-24M��a_? 1Daniel Mach <dmach@redhat.com> - 0.6.21-5R�k�- Mass rebuild 2013-12-27R��`cE 1Petr Šabata <contyk@redhat.com> - 0.6.21-4QR�@- Run autoreconf for aarch64���_�� 1Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild � <� � ��g� �/ 2systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��f� �u 2systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) #&57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��k��m 2systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��j�� 2systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��i�W 2systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��h��q 2systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #% bR #xRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ "���b "���c "���d "���g "���l "���m # ��n #��q #��v #��y #��z #��} #�� #�� #�� # �� # �� # �� # �� #�� #�� #�� #�� #�� #�� #�� #�� #��# #��( #��) #��* #��- #��2 # ��7 # ��> # ��E # ��J # ��R #!��Y #"��^ ##��e #$��g #'��k #)��o #*��q #-��u #.��x #/��z #2��~ #3�� #4�� #7�� #8�� #<�� #=�� #>�� #A�� #B�� #C��$ #D��' #E��- #F��0 #G��5 #H��8 #I��= #J��A #K��F #L��J #M��N #P��R #Q��U #T��Y #U��\ #V��^ #Y��b #Z��f #[��h #^��l #_��p #b��t #c��x #d��{ #g�� #h�� #i�� #j�� #k�� #m�� #n�� #o�� #p��! #q��% #r��* #s��2 #t��; #u��D #v��M #w��U � ��. � � ��oe�1 3Lukas Nykryn <lnykryn@redhat.com> - 219-73.1]�@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)���n� � 2systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��m� �' 2systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��l�I 2systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) � <� � ��q� �/ 3systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��p� �u 3systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) #,57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��u��m 3systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��t�� 3systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��s�W 3systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��r��q 3systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #+ . ��. ���x� � 3systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��w� �' 3systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��v�I 3systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) � <� � ��z� �/ 4systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��y� �u 4systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) #157704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��~��m 4systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��}�� 4systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��|�W 4systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��{��q 4systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #0 � ��. � � ��� � 4systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���� � 4systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X�� � �' 4systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f���I 4systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) � <� � ��� �/ 5systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��� �u 5systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) #657704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9����m 5systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q���� 5systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m���W 5systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;����q 5systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #5 � ��. � � �� � � 5systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)��� � � 5systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X�� � �' 5systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f�� �I 5systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) e �r+��V��: � � e D�B � 80b9e73c5db5a194278ac3415303dcf5c49c780dae020e15b55a65a9e02f2a56D�A � c5512bfc8f5d17195d34252e20dd34ef75e390d9bb8a38b30ba8be4e5c0904adD�@ � dcccb19275e44c98b220ff45b313949c6d1e421f5326c9e3d8f568c1ae986c15D�? � 894926755bf0b5caaf2195043acd56dcc5dc992c1c51411a5e923a6e2e1d55cbD�> � a8d6b71da3251c0921f8f1c9a527fe6468bab3f326f472567681e24f3f9bbd61D�= � 02f065f8fc1a7dad64b3db9dce1c2acf7f0fdb727133ffef1c209fa011adbcd6D�< � 841781e279649ca9fced8e74583d9a30e6d5e96023b689f339cd0c6814f8a746D�; � 30f73d4f8a1abd8421100fbb68de1f107a838a542bb020b5e22316b330a1560cD�: � f111af81b1171cde02cdf42152cd2cf0b250c9a755cff39952df38908f7a55f8D�9 � 126385b940d5f6f201b6b30130139b0125b1d44dc7842c59cc7cbba5a9a4404dD�8 � 3aa88d01f6198efa435e94380ac7bb30d03f89a522b7860137a566276cea51c9D�7 � 1ee43730cfd6c1751ff45f321c91c0f0965e683e47cb52b91f87ac210ed93c1aD�6 � de11efb648c50dca4022b29c14b4bc06fdcb8f36be5009d20018c917583af9bc #;57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9����m 6systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q���� 6systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m���W 6systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;�� ��q 6systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #: � ��. � � ��� � 6systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���� � 6systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��� �' 6systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f���I 6systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) \ �( \ �;����q 7systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #?�.��� �S 6systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��� �7 6systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) #@57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) � ���� � �X�� � �' 7systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f���I 7systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9����m 7systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q���� 7systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m���W 7systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744) � u� � � �� � �7 7systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)� �� � � 7systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)��� � � 7systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232) r Mw�O r �X��$� �' 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��#�I 8systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9��"��m 8systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��!�� 8systemd maintenance team <systemd-maint@redhat.com> - 219-76^�l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)�.�� � �S 7systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361) � u� � � ��'� �7 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)� ��&� � 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���%� � 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232) 0 M�.X � 0 f��-�I 9systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9��,��m 9systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��+�� 9systemd maintenance team <systemd-maint@redhat.com> - 219-76^�l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)� ��*� � 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� ��)� � 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.��(� �S 8systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361) #� � ��0� � 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���/� � 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��.� �' 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527) � �(� � f��5�I :systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)� ��4� � 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� ��3� � 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.��2� �S 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��1� �7 9systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) #� � ��8� � :systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���7� � :systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��6� �' :systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527) u �(� u ���=� � :systemd maintenance team <systemd-maint@redhat.com> - 219-78.8e�- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)� ��<� � :systemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� ��;� � :systemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.��:� �S :systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��9� �7 :systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) � b� � ���A� � ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��@� �' ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��?�I ;systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)���>� �) :systemd maintenance team <systemd-maint@redhat.com> - 219-78.9e]�@- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164) w nI� w � ��F� � ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� ��E� � ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.��D� �S ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��C� �7 ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)� ��B� � ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908) { l�? { �?��J� �u <systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802)� ��Ie�1 <Lukas Nykryn <lnykryn@redhat.com> - 219-73.1]�@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)���H� �) ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.9e]�@- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)���G� � ;systemd maintenance team <systemd-maint@redhat.com> - 219-78.8e�- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223) L _�" L �Q��N�� <systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��M�W <systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��L��q <systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #N� ��K� �/ <systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798) #O57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) p B�� p ���R� � <systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��Q� �' <systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��P�I <systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9��O��m <systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953) q� � ��U� �/ =systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��T� �u =systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802)� ��Se�1 =Lukas Nykryn <lnykryn@redhat.com> - 219-73.1]�@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) #S57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��Y��m =systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��X�� =systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��W�W =systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��V��q =systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #R . ��. ���\� � =systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��[� �' =systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��Z�I =systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) � <� � ��^� �/ >systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��]� �u >systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) #X57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��b��m >systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��a�� >systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��`�W >systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��_��q >systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #W � ��. � � ��f� � >systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���e� � >systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��d� �' >systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��c�I >systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) � <� � ��h� �/ ?systemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��g� �u ?systemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) #]57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��l��m ?systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��k�� ?systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��j�W ?systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��i��q ?systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #\ � ��. � � ��p� � ?systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���o� � ?systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��n� �' ?systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��m�I ?systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) #a57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��t��m @systemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��s�� @systemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��r�W @systemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��q��q @systemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #` � ��. � � ��x� � @systemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���w� � @systemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��v� �' @systemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��u�I @systemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) \ �( \ �;��{��q Asystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 #e�.��z� �S @systemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��y� �7 @systemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) #f57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) � ���� � �X�� � �' Asystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f���I Asystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9��~��m Asystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��}�� Asystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��|�W Asystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744) � u� � � ��� �7 Asystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)� ��� � Asystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���� � Asystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232) r Mw�O r �X��� �' Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f���I Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9����m Bsystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q���� Bsystemd maintenance team <systemd-maint@redhat.com> - 219-76^�l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)�.��� �S Asystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361) � u� � � �� � �7 Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)� �� � � Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)��� � � Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232) 0 M�.X � 0 f���I Csystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9����m Csystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q���� Csystemd maintenance team <systemd-maint@redhat.com> - 219-76^�l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)� ��� � Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� �� � � Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.�� � �S Bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361) e �r+��V��: � � e D�O � 1db80fc0b7ec4ad66d1f7b86e831c3ed4d4386b1db1558cc7afcecf08ff5184eD�N � 5cf5d9d1af4c78ca14d14daa45c998d5f75484a3ab878d4a4e8caae845ff0c1dD�M � 551d2065c265d1e53d4bec46b49874d3aff2ccc0e5b50f98b64fb49c31c77700D�L � 54d67315041544440edcdc1a784b786f749cce152edd23d3ed953826b64a5b3bD�K � 7ae732734ae47230b9ee78bd90d72d963f85df5663e2f2ce2377f9f040e2ced7D�J � d91245d56499e00006afb5caef9f595c26917df6d3112f9952a0e2b928994342D�I � 565a99b9e94164785e21e6c316bc072e35df5c03df3267601461e2b96157b0f9D�H � fc6296617d74745ac75f51e708264f5e77144e1a594d2ddfaadc84e9d9d9624dD�G � ca42c81542be47ee686bcb3662bdb26e91f2fa0041534bf807e0b9294dcae15aD�F � 1409a93de8f33913e0adaf61bf58a25d2d2e6253e503e532e910519107835c33D�E � df76a933cd54ed2e60e4eacb34639d343d8e273926033d63c3e9f0090215673eD�D � c7963550f0e18a7fdd4139bb7942c93b0a9cffc5bec4e5833552b722e442120fD�C � 0d7fa70d37741c62bde710cf842f10260cf261673a4a7408c061b0e28d2bc955 #� � ��� � Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���� � Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��� �' Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527) � �(� � f���I Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)� ��� � Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� ��� � Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.��� �S Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��� �7 Csystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) #� � �� � � Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���� � Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��� �' Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527) u �(� u ���!� � Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.8e�- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)� �� � � Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� �� � � Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.�� � �S Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� �� � �7 Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) � b� � ���%� � Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��$� �' Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��#�I Esystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)���"� �) Dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.9e]�@- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164) w nI� w � ��*� � Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� ��)� � Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.��(� �S Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��'� �7 Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)� ��&� � Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908) I l�f��* � I {��2i� FRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#�@- Backport a patch to fix a gnome-shell crash - Related: #1569295^��1e[ FKalev Lember <klember@redhat.com> - 3.28.1-1Z���- Update to 3.28.1 - Resolves: #1569295c��0qY FFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y��- Update to 3.26.0 - Related: #1481381^��/e[ FKalev Lember <klember@redhat.com> - 3.20.4-1XbW�- Update to 3.20.4 - Resolves: #1387009o��.e} FKalev Lember <klember@redhat.com> - 3.14.1-3W��- Switch to new METAR data provider - Resolves: #1371550d��-ka FMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations Resolves: #1304249���,� �) Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.9e]�@- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)���+� � Esystemd maintenance team <systemd-maint@redhat.com> - 219-78.8e�- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223) ; � �A�f � ; ^��;e[ GKalev Lember <klember@redhat.com> - 3.28.1-1Z���- Update to 3.28.1 - Resolves: #1569295c��:qY GFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y��- Update to 3.26.0 - Related: #1481381^��9e[ GKalev Lember <klember@redhat.com> - 3.20.4-1XbW�- Update to 3.20.4 - Resolves: #1387009o��8e} GKalev Lember <klember@redhat.com> - 3.14.1-3W��- Switch to new METAR data provider - Resolves: #1371550d��7ka GMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations Resolves: #1304249s��6uu FMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y�@- Fix no weather data available - Resolves: #1938275c��5]m FDavid King <dking@redhat.com> - 3.28.2-3]>�- Fix multilib conflict in subpackage (#1623538){��4o� FDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,�- Fix dangling symbolic link to README.md - Resolves: #1569295^��3e[ FKalev Lember <klember@redhat.com> - 3.28.2-1[a��- Update to 3.28.2 - Resolves: #1569295 � �9�Z � � c��DqY HFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y��- Update to 3.26.0 - Related: #1481381^��Ce[ HKalev Lember <klember@redhat.com> - 3.20.4-1XbW�- Update to 3.20.4 - Resolves: #1387009o��Be} HKalev Lember <klember@redhat.com> - 3.14.1-3W��- Switch to new METAR data provider - Resolves: #1371550d��Aka HMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations Resolves: #1304249s��@uu GMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y�@- Fix no weather data available - Resolves: #1938275c��?]m GDavid King <dking@redhat.com> - 3.28.2-3]>�- Fix multilib conflict in subpackage (#1623538){��>o� GDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,�- Fix dangling symbolic link to README.md - Resolves: #1569295^��=e[ GKalev Lember <klember@redhat.com> - 3.28.2-1[a��- Update to 3.28.2 - Resolves: #1569295{��<i� GRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#�@- Backport a patch to fix a gnome-shell crash - Related: #1569295 # � �>�` � � # ^��Me[ IKalev Lember <klember@redhat.com> - 3.20.4-1XbW�- Update to 3.20.4 - Resolves: #1387009o��Le} IKalev Lember <klember@redhat.com> - 3.14.1-3W��- Switch to new METAR data provider - Resolves: #1371550d��Kka IMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations Resolves: #1304249s��Juu HMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y�@- Fix no weather data available - Resolves: #1938275c��I]m HDavid King <dking@redhat.com> - 3.28.2-3]>�- Fix multilib conflict in subpackage (#1623538){��Ho� HDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,�- Fix dangling symbolic link to README.md - Resolves: #1569295^��Ge[ HKalev Lember <klember@redhat.com> - 3.28.2-1[a��- Update to 3.28.2 - Resolves: #1569295{��Fi� HRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#�@- Backport a patch to fix a gnome-shell crash - Related: #1569295^��Ee[ HKalev Lember <klember@redhat.com> - 3.28.1-1Z���- Update to 3.28.1 - Resolves: #1569295 < �7�V�p � < �8��UY� JJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274s��Tuu IMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y�@- Fix no weather data available - Resolves: #1938275c��S]m IDavid King <dking@redhat.com> - 3.28.2-3]>�- Fix multilib conflict in subpackage (#1623538){��Ro� IDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,�- Fix dangling symbolic link to README.md - Resolves: #1569295^��Qe[ IKalev Lember <klember@redhat.com> - 3.28.2-1[a��- Update to 3.28.2 - Resolves: #1569295{��Pi� IRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#�@- Backport a patch to fix a gnome-shell crash - Related: #1569295^��Oe[ IKalev Lember <klember@redhat.com> - 3.28.1-1Z���- Update to 3.28.1 - Resolves: #1569295c��NqY IFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y��- Update to 3.26.0 - Related: #1481381 � p�o� � b��[[m JHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��Z[�; JHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��YY�U JJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��XY�) JJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��WY� JJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��VY�? JJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426 | q�E� � | x��aY� KJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��`Y�? KJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��_Y� KJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274���^[�O JHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699���][�C JHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��\[�; JHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482 � {�� � ���g[�C KHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��f[�; KHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b��e[m KHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��d[�; KHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��cY�U KJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��bY�) KJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541 > g�� > �V��mY�U LJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��lY�) LJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��kY� LJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��jY�? LJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��iY� LJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274���h[�O KHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699 � q |�P � �8��sY� MJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274���r[�O LHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699���q[�C LHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��p[�; LHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b��o[m LHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��n[�; LHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585 � p�o� � b��y[m MHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��x[�; MHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��wY�U MJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��vY�) MJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��uY� MJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��tY�? MJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426 | q�E� � | x��Y� NJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��~Y�? NJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��}Y� NJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274���|[�O MHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699���{[�C MHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��z[�; MHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482 � {�� � ���[�C NHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��[�; NHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b��[m NHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��[�; NHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��Y�U NJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� �� Y�) NJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541 g � ��o�' OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��o�; OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]���[�O NHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699 � � �2�� o�w OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y�� o�E OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��o�; PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� ��q�O OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� OAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] e �r+��V��: � � e D�\ � ecf00639a05e5928c699eb7451b91c04ef62ea4e3ada1c96ee6c9ba35c065f28D�[ � 388aba1b0bdea4684f1db472cbd84cc4331e3d51543a84e076c8c8209113539eD�Z � 6b59b214e1d648dd6450ccf97a6e02143f15dcb331b6d520b32e3390c35df31eD�Y � 3be8775407bc08f4fe54e5628c556d5472f9d4ef0d5b89d29c9c9b634121cb07D�X � a48861f8b0007e766c5886a948e293f97eb2f45c90d1afc5373722cf5a163b72D�W � 0cad55db6dba2a060d78d5cd109fe110b948f6008192e29b843fe591ffec7fc2D�V � dbd4fcb28f8cbfd9fb540e8d37c4b83f661fd5b856fa728606339a61f95f4513D�U � 0b0f6b7bf49772aa7d4525fb75fddff1ff77a08c6c3cf4c990c7fcb0fd59a2b9D�T � a4ed3b8d30ed584009accf96a7436d098f14e555ae10c804f398816146a347e6D�S � 1e9ecb13d56ad5c7fa67acece7a0f89c452b11bad3fc66a7589eb57a67fdb766D�R � 00dbfd02a12975ec58e646015d21c1697f304b58353b1372310d96c80b2903aeD�Q � 4c0fe67802024d085939269a1da54ef7d9c6feea27bc2b6b94c3c64d18835d38D�P � 7bb7db4c0e3b5dbb711a2589b4e752e8fe25c9b73185eaa3eecc00450d613c21 w qx w �|��o� PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��o�' QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��q�O PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� PAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2�� o�w QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y�� o�E QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��!o�m QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���$q�9 QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��#q�O QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���"o� QAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��'o� RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��&o�{ RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��%o�' RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��(o�w RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��)o�E RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��*o� RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��+o�m RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���.q�9 RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��-q�O RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���,o� RAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��1o�w SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��0o� SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��/o�{ SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��2o�E SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��3o� SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��4o�m SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���7q�9 SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��6q�O SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���5o� SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��:o� TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��9o�{ TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��8q�a SAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��;o�w TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��<o�E TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��=o� TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��>o�m TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Aq�9 TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��@q�O TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���?o� TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��Do�w UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Co� UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��Bq�a TAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��Eo�E UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] bR #�RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ #y��a #z��g #{��m #|��s #}��y #~�� #�� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #���! #���$ #���' #���( #���) #���* #���+ #���. #���1 #���2 #���3 #���4 #���7 #���: #���; #���< #���= #���> #���A #���D #���E #���F #���G #���J #���M #���N #���O #���P #���Q #���T #���W #���X #���Y #���Z #���] #���` #���a #���b #���c #���d #���g #���j #���k #���l #���m #���p #���s #���t #���u #�v #Á�w #ā�z #Ł�} #Ɓ� #ǁ� #ȁ� #Ɂ� #ʁ� #ˁ� #́� #́� #� #Ё� #с� #ҁ� #Ӂ� #ԁ� #Ձ�" #ց�% #ׁ�( #�+ #ف�. #ځ�/ #ہ�0 #܁�3 #݁�5 : : �A��Fo� UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Go�m UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Jq�9 UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Iq�O UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Ho� UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��Mo� VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��Lq� UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Kq�a UAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��No�w VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Oo�E VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Po� VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Qo�m VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Tq�9 VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Sq�O VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Ro� VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��Wo�w WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Vq� VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Uq�a VAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��Xo�E WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Yo� WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Zo�m WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���]q�9 WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��\q�O WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���[o� WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��`q�Q WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��_q� WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��^q�a WAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��ao�w XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��bo�E XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��co� XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��do�m XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���gq�9 XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��fq�O XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���eo� XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��jq�Q XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��iq� XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��hq�a XAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��ko�E YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��lo� YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��mo�m YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���pq�9 YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��oq�O YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���no� YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��sq�Q YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��rq� YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��qq�a YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��tq� YAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y��uo�E ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��vo� ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��wo�m ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���zq�9 ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��yq�O ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���xo� ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��}q�Q ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��|q� ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��{q�a ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � � �A��o� [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]�=��~q� ZAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] N N �-�� o�m [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update / �� / �A�� o� \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]�D��}� [Eduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16eV@- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]�=��q� [Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] N N �-�� o�m \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �.��a�} ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�D��}� \Eduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16eV@- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]�=��q� \Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] e �r+��V��: � � e D�i � b4bb4d388af0708a559cf09c5a7fc75ab89a349115729620b72c790f28e7422eD�h � 9ebd06e0dbe03a1b81d2bb45598fa8b2a8423c754eb01c2dc19009b37889af7dD�g � ac082581e82346ea696427fe38a4a1ad08c1a2f428d21c026da32d80aa0c4cfeD�f � 79b1198c3958d0c5aaf003eb2c5f482ad658aac62e3b7fe05127e6498153d891D�e � 9ddb3989f547bec0175c3f866ce77a6ac4742203e5567fcd03af76e451568f49D�d � 6e22c4b0aee7e9979b7f739d1db74f8609f8f27a72d28c139c4b20648516c712D�c � 3cfc9f52a00f0406e2e427948342a30ca2cd4762712b56ebee9d8bf24018e163D�b � 720ce08cb7d09fef55e566296d6985f0a465fbdb1a66bfda747f53f178f67f3aD�a � 4168f549a1eed91719335c29e0efff79a7747ffbbdf777b56e435e5123a039a7D�` � 0f725b790a384924e7b95b0b06d3009171c8060554b98e9cc285dabe9c324930D�_ � 75cdb68690a46ab40f6949579f2ea4df2f3e811398a7dcefb77813e87272e899D�^ � d787f263d801d560eb3933a597fbdb2f4eb89a55b5cd49730ab0dc795715c028D�] � 9c3d41d6041f9bdd8e0938ed6e0638aa29653f13b1631dd40dfbcc0dce9adc28 � T � t��a� ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��a�s ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�y��a� ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �P��g�; ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��c�] ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��g� ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��g�{ ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���g�' ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y�� a� ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.�� a�} ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.�� g�w ]Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t�� a� ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)�� a�s ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��"g�; ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��!c�] ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��%g� ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��$g�{ ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���#g�' ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��(i�s _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��'i� _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��&g�w ^Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��+o�; _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��*k�] _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��)i� _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��.o� _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��-o�{ _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��,o�' _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��/o�w _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��0o�E _Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x��3i� `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��2i�s `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��1i� `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��5o�; `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��4k�] `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��8o� `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��7o�{ `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��6o�' `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��9o�w `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��:o�E `Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x��<i� aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��;i�s aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��>o�; aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��=k�] aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��Ao� aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��@o�{ aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��?o�' aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Bo�w aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Co�E aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��Ei�s bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A��Do� aAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��Ho�; bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Gk�] bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��Fi� bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��Ko� bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Jo�{ bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Io�' bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Lo�w bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Mo�E bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��Oi� cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��No� bAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��Qo�; cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Pk�] cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��To� cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��So�{ cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Ro�' cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Uo�w cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Vo�E cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Wo� cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x��Yi� dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��Xo�m cAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T��[o�; dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Zk�] dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��^o� dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��]o�{ dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��\o�' dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��_o�w dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��`o�E dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��ao� dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��bo�m dAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � �t��eo�{ eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��do�' eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��co�; eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2��go�w eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��fo� eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y��ho�E eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��io� eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��jo�m eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��mo�; fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� ��lq�O eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���ko� eAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��po� fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��oo�{ fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��no�' fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��qo�w fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��ro�E fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��so� fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��to�m fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��wo�' gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��vq�O fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���uo� fAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��zo�w gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��yo� gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��xo�{ gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��{o�E gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��|o� gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��}o�m gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���~o� gAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��o� hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target bR $CRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ #߁�9 #��: #��< #��> #��A #��B #��C #��E #��H #��K #��L #��M #��O #��Q #��T #��U #��V #��W #��Y #��[ #��^ #��_ #���` #���a #���b #���e #���g #���h #���i #���j #���m #���p #���q $ ��r $��s $��t $��w $��z $��{ $��| $��} $�� $ �� $ �� $ �� $ �� $�� $�� $�� $�� $�� $�� $�� $�� $�� $�� $�� $�� $�� $ �� $ ��! $ ��" $ ��# $ ��& $!��) $"��* $#��+ $$��, $%��- $&��0 $'��3 $(��4 $)��5 $*��6 $+��9 $,��< $-��= $.��> $/��? $0��@ $1��C $2��F $3��G $4��H $5��I $6��L $7��O $8��P $9��Q $:��R $;��S $<��V $=��Y $>��[ $?��\ $@��_ $A��b $B��e � � �2��o�w hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� hAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2�� o�w iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��o�E iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��o� jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��q�a iAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update e �r+��V��: � � e D�v � 33522ef6344e2c23c9585439f96860fbac64c8059e3fafe85e39f00d654826beD�u � 676257fa89a2415e1fed624878b0d5c3f3c334c139f75c44938d08415b9e8b3fD�t � 9c9453260d66b8957dc7fb411913d40ce90346035eda2b58c2f9c759b2125cf7D�s � 0f791fdbdca1788b246815a870b316c43b536133a58c0b7483e09cce243dbf52D�r � beeb913c932963a0d8888e51c12b07a6993454a38f7ef567a5a56da4208e5949D�q � f035504bb52e167428211e66d8d1e6057ea84e13f5eb03edf9c7d58b26a52b99D�p � 5df1a4e83ab5135939c23e1037e6d05b3b83a60b3b4a06fb6e85e91959657cbdD�o � c942cd6a2b252aa88c37729e5753a20d63376cc0d329bdcbc5265806440a4f46D�n � b1a437d314e4c8a0e5d1e099a8fdbcdb1ff51d9795ce9c175c3bce0b7e4ca564D�m � 4483963c33f057bfcd4b6120dbcefdc634413263eea9af2c988563522cfa5127D�l � 0136b7f5a2716c2969f4dc132e19b7819af04e2aa0c5ba9bd9774ccf09c14e9fD�k � 9b4b4560b2485d70634ad393bde40d05f38c2ecce03135964bdc3876bf556570D�j � 07b1856027333bf98a662c1c5c7b92d2391deb1108f57f3ca5b27d6ee192f7a0 � � �2��o�w jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2�� o�w kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h�� q�a jAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��!o�E kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��"o� kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��#o�m kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���&q�9 kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��%q�O kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���$o� kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��)o� lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��(q� kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��'q�a kAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��*o�w lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��+o�E lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��,o� lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��-o�m lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���0q�9 lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��/q�O lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���.o� lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��3o�w mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��2q� lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��1q�a lAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��4o�E mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��5o� mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��6o�m mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���9q�9 mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��8q�O mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���7o� mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��<q�Q mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��;q� mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��:q�a mAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��=o�w nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��>o�E nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��?o� nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��@o�m nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Cq�9 nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Bq�O nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Ao� nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��Fq�Q nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��Eq� nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Dq�a nAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��Go�E oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Ho� oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Io�m oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Lq�9 oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Kq�O oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Jo� oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��Oq�Q oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��Nq� oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Mq�a oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��Pq� oAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y��Qo�E pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Ro� pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��So�m pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Vq�9 pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Uq�O pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���To� pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��Yq�Q pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��Xq� pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Wq�a pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � � �A��[o� qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]�=��Zq� pAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] N N �-��\o�m qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���_q�9 qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��^q�O qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���]o� qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��bq�Q qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��aq� qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��`q�a qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update / �� / �A��eo� rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]�D��d}� qEduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16eV@- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]�=��cq� qAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] N N �-��fo�m rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���iq�9 rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��hq�O rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���go� rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��lq�Q rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��kq� rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��jq�a rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �.��oa�} sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�D��n}� rEduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16eV@- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]�=��mq� rAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � T � t��ra� sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��qa�s sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�y��pa� sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �P��tg�; sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��sc�] sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��wg� sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��vg�{ sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���ug�' sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y��za� tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��ya�} tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��xg�w sAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t��|a� tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��{a�s tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��~g�; tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��}c�] tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��g� tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p�� g�{ tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���g�' tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��i�s uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��i� uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��g�w tAlexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��o�; uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��i� uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|�� o� uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2�� o�w uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y�� o�E uAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x��i� vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��i�s vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}�� i� vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��o�; vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��o� vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E vAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] e �r+��V��: � � e D� � 1a363c8575a8323b1e1cbafa08ba87655572c3b032a755bcf5cf957927fb9a70D� � ec1b22bbbd65cf0d8ac4abc748b4d4e1721149c816440d123ce3d707e25059a8D� � 8f22a24548ec519571fd7dcc4779339bb29955be70e289533d286d4069cdfe23D� � 3c4ec0f5afdd9b9d8e623857335cfd73d8e86540fe7c74886a0fc678fbf926acD� � b410c0490c2af4f7e5e57b126535f682c43747b4f65ab0c3b8b86259df169293D�~ � 2d79f11c74a72adcef4f3407e674947b25332958c8d3722a976ffc2d712fb812D�} � ca2534fe257e28c069b648a161fddd50d841f1df267a98ca33d8ceea488d83c7D�| � 868a84b5cfeae8a5e75edd91fc853a5ed3490b4de3805f6ff0020f5483875122D�{ � ad1b306ed16dae044e07261f88e7b3e1846b160926009eba1eb3b872ad1d6443D�z � 03701d6e0d843fdfb34d5135af97796623145817df79fabb6a8fb6eed7cfb552D�y � fb317c790c7775a8cd2becc6286e6028a33743078585cef6e150d0614e34aa17D�x � 4aeb4ec586ae68b258e3a26e5bf455914a1bef9bf96ce52ea53b74decb9d1176D�w � 31f46b22cd82ef4ccbb472cae30cc13508b35a42fe8d5807a5d9fc45b18a830a � N� x��i� wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��i�s wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��o�; wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|�� o� wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2�� o�w wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y�� o�E wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��!i�s xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A�� o� wAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��$o�; xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��#k�] xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��"i� xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��'o� xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��&o�{ xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��%o�' xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��(o�w xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��)o�E xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��+i� yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��*o� xAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��-o�; yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��,k�] yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��0o� yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��/o�{ yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��.o�' yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��1o�w yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��2o�E yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��3o� yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x��5i� zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��4o�m yAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T��7o�; zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��6k�] zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��:o� zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��9o�{ zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��8o�' zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��;o�w zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��<o�E zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��=o� zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N � N |��@m� {Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��?m� {Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726�-��>o�m zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] bR $�RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ $D��i $E��l $F��o $G��r $H��t $I��w $J��z $K��| $L��~ $M�� $N�� $O�� $P�� $Q�� $R�� $S�� $T�� $U�� $V�� $W�� $Y�� $Z�� $[�� $\�� $]�� $^��! $_��$ $`��' $a��( $b��) $c��+ $d��- $e��0 $f��1 $g��2 $h��3 $i��5 $j��7 $k��: $l��; $m��< $n��= $o��@ $q��G $r��N $s��U $t��\ $u��c $v��j $w��q $x��x $y�� $z�� ${�� $|�� $}�� $��' $���0 $���9 $���B $���K $���T $���] $���c $���i $���n $���t $���{ $��� $��� $��� $��� $��� $���! $���# $���( $���+ $���- $���2 $���5 $���7 $���< $���? $���A $���E $���L $���R $���X $���_ $���d $���k $���q $���w $���} $��� $��� $��� $��� � v��� � ��Gm� {Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Fm� {Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Em� {Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Dmu {Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Cma {Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��Bm� {Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Am� {Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347 � {�{�q � o��Nmu |Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Mma |Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��Lm� |Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Km� |Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��Jm� |Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��Im� |Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��Hm� {Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 e z�t�o � e |��Um� }Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Tm� }Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��Sm� }Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��Rm� |Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Qm� |Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Pm� |Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Om� |Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 z �$�� z ���\m�= }Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��[m� }Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Zm� }Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Ym� }Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Xm� }Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Wmu }Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Vma }Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726 � ��v � � ��cm� ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���bm� ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��amu ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��`ma ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��_m� ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���^m� ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��]m� ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927 } }�_�v } ���jm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��imu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��hma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��gm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���fm�= ~Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��em� ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��dm� ~Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 ? }�u�F � ? |��qm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���pi� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���oi�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���nm�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��mm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��lm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��km� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 z �$�� z ���xm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��wm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��vm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��um� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���tm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��smu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��rma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726 { j�z� � { ��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��~m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���}m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��|mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��{ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���zi� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���yi�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319 Z {�L�6 � Z o��mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726� ��i�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� �� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 9 z�t�V � 9 ��� i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163��� i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319��� m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� �� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492�� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 A q �"�; � A ����� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version����� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild����� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versiond��ic �Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M�{@- libksba-devel multilib conflict (#601976)� ��i�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961 q �`�R� � q [�� [_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH�� [9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version��� �� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild����� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versiond��ic �Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M�{@- libksba-devel multilib conflict (#601976)V��_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27 e �r+��V��: � � e D� � 4d0e360eff9294623b345353bcf2cb4623c50a3e2bf31ace6ba05141150d85fdD� � 359852ce38e0555b23e78c945070ef67c0599138eac0c52de77a819e8fdebce9D� � cec370a7441899c3ffcd47f783a0437d9d649fd4a1252c6c317561f431e537c4D� � 36ad5a43df60889dd9c1134cb0e042317befa64f7293f44bc91271fddbbfc7e6D� � d5b31f13f3b46bf5b0b92ae49a2422fef7d5c0ecefccc27c7b96a0aae7f7ce31D� � 0c8fa4695663226154eeb62875404c38ac8f61913460fe2e8036ae8e76cad75eD� � 082abb4e91620918c0d5d1da8dfb191f950c793d112a4ac3ec4f2055ca594c68D� � d66f8f50f89a80ba6132ad39773812f3a9b5d598db35a63de6e8465c3c7137d8D� � ee580eaecadcceeb9560a23a48c376d9c012f5fee8623d0f10419c273b744065D� � 46064f76c45b401ff1197bbdcd32585b704afcef86d2dad3fb76250749b3ef7dD� � b93825bf103f570b5e1032748e404b0d685f2025279cdfd1efbd0506671dd269D� � 09f2614aeded0a8d1f7454f0270fe81a129ba048470ed9851001049d758c2a0fD� � 02d7a80b905c4425a04fb580f2e9cedea180c37a12f4aebcc804d768f6a12ffd > e�k � � � > [��'[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��&[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���%�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���$�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��#[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versionV��"_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��!]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L�� ]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27��� �� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild B e�k�) � B H��0[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���/�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���.�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��-[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versionW��,_S �Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c��- Fix for CVE-2022-47629 (#2161571)V��+_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��*]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��)]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���(�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild b ��f �I � b ���9�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��8[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versiond��7ic �Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M�{@- libksba-devel multilib conflict (#601976)W��6_S �Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c��- Fix for CVE-2022-47629 (#2161571)V��5_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��4]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��3]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���2�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��1[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-config q e� �% � q H��B[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versiond��Aic �Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M�{@- libksba-devel multilib conflict (#601976)V��@_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��?]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��>]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���=�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��<[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��;[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���:�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild > e�~ �4 � � > H��K[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versionV��J_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��I]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��H]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���G�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��F[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��E[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���D�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���C�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild / e�~ �4 � � / W��T_S �Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c��- Fix for CVE-2022-47629 (#2161571)V��S_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��R]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��Q]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���P�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��O[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��N[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���M�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���L�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild > �~2�8 � � > V��]_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��\]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��[]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���Z�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��Y[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��X[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���W�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���V�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��U[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream version t �Cc� � t ���ci� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��bi�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���ag�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��`g�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��_gY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129W��^_S �Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c��- Fix for CVE-2022-47629 (#2161571) 8 `��" � 8 ^��igY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���hi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���gi�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��fi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��ei�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���di�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560 � ��1 � ���ni�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���mi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��li�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���kg�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��jg�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 : NU�: � : r��te� �Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26���se�' �Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1V�b�- Rebase libldb to 1.1.25 - Remove upstreamed patches - Related: rhbz#1322691���ri� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���qi�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��pi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��oi�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 G X�7�C � G z��{c� �Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B�@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz��zc� �Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? �- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambav��yc� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��xc� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z�- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��wc� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase�"��vc�c �Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1Y�M�- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to version 4.7.x�#��ue�c �Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X��@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to version 4.6.x Y ���M � Y v��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z�- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase�"�� c�c �Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1Y�M�- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to version 4.7.x�#��e�c �Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X��@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to version 4.6.xr��~e� �Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26���}e�' �Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1V�b�- Rebase libldb to 1.1.25 - Remove upstreamed patches - Related: rhbz#1322691`��|e_ �Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y�@- resolves: #1941511 - Fix CVE-2021-20277 ~ ��&�& ~ �#�� e�c �Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X��@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to version 4.6.xr��e� �Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26���e�' �Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1V�b�- Rebase libldb to 1.1.25 - Remove upstreamed patches - Related: rhbz#1322691`��e_ �Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y�@- resolves: #1941511 - Fix CVE-2021-20277z��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B�@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? �- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambav��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase � Y�e�m � � `��e_ �Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y�@- resolves: #1941511 - Fix CVE-2021-20277z��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B�@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? �- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambav�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z�- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase�"�� c�c �Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1Y�M�- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to version 4.7.x C v X�7 � C v��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z�- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase�"��c�c �Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1Y�M�- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to version 4.7.x�#��e�c �Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X��@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to version 4.6.xr��e� �Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26���e�' �Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1V�b�- Rebase libldb to 1.1.25 - Remove upstreamed patches - Related: rhbz#1322691 _ ��=� _ �(�� W�{ �Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=�� W�% �Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk�� W� �Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��Wk �Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)`��e_ �Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y�@- resolves: #1941511 - Fix CVE-2021-20277z��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B�@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? �- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba e �r+��V��: � � e D� � 1a91953e84dbe2c03ef4d9284debe9f3fd29f808a721e032346b19d8191151ccD� � 199c200e85ae57dc217530a09f2172f136c763583a9869d518e3dd7c2a2f3c24D� � b64c66f5d35425a886b1afbcf898922915a06a253e4ec2f2efb169f42dea7125D� � 09936061a18c7bf3b0903e9e1994dca141d245478064ada19312d0d78abe44aeD� � ca36fb0f490cdd14f4ed8b6ecf0440998542eaeed3c3985f7357025964231df6D� � 7631dec5bfc4f885319322ddf28a8c174bd735138c0021a996ea89b80e010ec4D� � c0a963a27f23cc436b7364ce694e6afe9a0e8d26be17bc8dc816b46fc2e0f261D� � 0cff7abce034e9ae5e89bd1f5c50241356dd38507e0c53e17d563453b7923822D� � c10cbe426290ea35692c88e6f4393bef89f510b20d8587b123e03a419891e2a3D� � 13f0a70db8c30427ac5dcfc998ed9c2ea98da56b6c4439d62d54bc51fca0c198D� � 776a13c05abec92b93e26a3e73b33106410100566b5e395d5a22469f660365abD� � 74ba5dbc31e8d072aad83ccc34e693990c0625ce81a367690bc1cc6bbdbdc121D� � 2d1f2caacc8bdd289ec4d9a21bbe90c08d63cc088bec34c32f2acb2df58d2761 E � E ���!W�I �Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A�� W�- �Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\�� W�c �Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��#W�m �Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��"W�_ �Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��(W�{ �Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��'W�% �Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��&W� �Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��%Wk �Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��$g�# �Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���+W�I �Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��*W�- �Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��)W�c �Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��-W�m �Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��,W�_ �Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��2W�{ �Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��1W�% �Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��0W� �Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��/Wk �Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��.g�# �Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���5W�I �Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��4W�- �Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��3W�c �Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��7W�m �Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��6W�_ �Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��<W�{ �Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��;W�% �Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��:W� �Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��9Wk �Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��8g�# �Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���?W�I �Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��>W�- �Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��=W�c �Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��AW�m �Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��@W�_ �Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit ^ � ^ �/��Eq�o �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U��- libpcap now correctly recognizes Netlink datalink type (#1031974) - fix vlan tagged packet filtering (#1079525)�u��Dq�{ �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U�@- display also first packet when capturing in cooked mode (#1176612) - make sure that userland bpf filter interpreter is given snaplen such that size of cooked header is account for�&��Cq�] �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}��- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)�D��Bg�# �Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] � _��(�% � � ��Lq�Q �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr���Kq� �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsv��JE�) �Michal Ruprich - 14:1.5.3-11Y��- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesY��IuA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y��@- Add support for AF_VSOCKX��HsA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y, @- Bound packet size to 64kz��Gq� �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U�@- make sure that sll header size is accounted for (#1176612)� ��Fq�I �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U��- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974) , U[� � , X��RsA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y, @- Bound packet size to 64kz��Qq� �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U�@- make sure that sll header size is accounted for (#1176612)� ��Pq�I �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U��- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)�/��Oq�o �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U��- libpcap now correctly recognizes Netlink datalink type (#1031974) - fix vlan tagged packet filtering (#1079525)�u��Nq�{ �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U�@- display also first packet when capturing in cooked mode (#1176612) - make sure that userland bpf filter interpreter is given snaplen such that size of cooked header is account for�&��Mq�] �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}��- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096) V �)��P V �u��Xq�{ �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U�@- display also first packet when capturing in cooked mode (#1176612) - make sure that userland bpf filter interpreter is given snaplen such that size of cooked header is account for�&��Wq�] �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}��- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)� ��Vq�Q �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr���Uq� �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsv��TE�) �Michal Ruprich - 14:1.5.3-11Y��- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesY��SuA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y��@- Add support for AF_VSOCK q L�-�t � q ���_q� �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsv��^E�) �Michal Ruprich - 14:1.5.3-11Y��- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesY��]uA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y��@- Add support for AF_VSOCKX��\sA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y, @- Bound packet size to 64kz��[q� �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U�@- make sure that sll header size is accounted for (#1176612)� ��Zq�I �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U��- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)�/��Yq�o �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U��- libpcap now correctly recognizes Netlink datalink type (#1031974) - fix vlan tagged packet filtering (#1079525) a [�� a � ��dq�I �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U��- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)�/��cq�o �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U��- libpcap now correctly recognizes Netlink datalink type (#1031974) - fix vlan tagged packet filtering (#1079525)�u��bq�{ �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U�@- display also first packet when capturing in cooked mode (#1176612) - make sure that userland bpf filter interpreter is given snaplen such that size of cooked header is account for�&��aq�] �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}��- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)� ��`q�Q �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr d �&�O�! d �8��kY� �Jarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274� ��jq�Q �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr���iq� �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsv��hE�) �Michal Ruprich - 14:1.5.3-11Y��- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesY��guA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y��@- Add support for AF_VSOCKX��fsA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y, @- Bound packet size to 64kz��eq� �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U�@- make sure that sll header size is accounted for (#1176612) � p�o� � b��q[m �Honggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��p[�; �Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��oY�U �Jarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��nY�) �Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��mY� �Jarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��lY�? �Jarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426 | q�E� � | x��wY� �Jarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��vY�? �Jarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��uY� �Jarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274���t[�O �Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699���s[�C �Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��r[�; �Honggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482 � {�� � ���}[�C �Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��|[�; �Honggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b��{[m �Honggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��z[�; �Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��yY�U �Jarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��xY�) �Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541 > g�� > �V��Y�U �Jarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��Y�) �Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��Y� �Jarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� �� Y�? �Jarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��Y� �Jarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274���~[�O �Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699 � q |�P � ��� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode���[�O �Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699���[�C �Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��[�; �Honggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b��[m �Honggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��[�; �Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585 * &�%�C � * ���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog P � 3�2 � P t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black C n�v� � C ��� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode��� g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849 e �r+��V��: � � e D�* � bc430ed0cfd4a663b76358074912057f989f4af493a6909136e70731ba2358deD�) � 730a731598f675b1827b85e2f2a963fb1c75d82ea0eb61e2b544a1c868517c7aD�( � 694e41c94c00e68912502d5f6c5bfde8a366987f5381e5d31b889a6b3928fdf0D�' � 09f598da7d3fbe1d2b05e159dc8f3d04792678621bf6d1f87c0edb4896d550a3D�& � 5a66d5d5dc478ed425ac3150ca54707625780a2e26284391fb1ebfb7924f88e9D�% � ff496670decb17b290f032a8854f0420ac2848d6b92e9e0df99491a13901a396D�$ � 31f3f35c713ad4fecb47ca4bfcba6b22a99a0311e91687edac989c0a717ba2ecD�# � 17cb2cf3a7524082c239fd29082b6e294757fdb6175dc11ee0f7a52fb4e3fd76D�" � 443c9cfc06a5f4f00f7780823a1f4d236782b838c05109edde4737cba50357cbD�! � 2c8b6a3c06bbaf16efe5dda84ccb23687cd29b2f04bf1f640024f805be0dc23bD� � 0f7c4de217d674dd4adcc5ec84c9df840a974061fb940697d0f1d2c3317bca7dD� � 564ac561fd3290312c3e833edb5ea883a24d202539893cdb0482247a743750b5D� � 8129ad43222a6a88ffa26b7ed5f36d10b1edede7d67aa145c0880eb6d3058828 * &�%�C � * ���$u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��#u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��"uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��!u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog P � 3�2 � P t��+uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��*u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���)u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��(uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��'w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog~��&w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��%ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black C n�v� � C ���1u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode���0g�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~��/w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��.ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���-u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��,u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849 * &�%�C � * ���8u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��7u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��6uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��5u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���4u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��3uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��2w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog P � 3�2 � P t��?uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��>u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���=u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��<uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��;w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog~��:w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��9ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black C n�v� � C ���Eu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode���Dg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~��Cw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Bui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Au� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��@u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849 * &�%�C � * ���Lu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Ku�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Juw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Iu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Hu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Guw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Fw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog P � 3�2 � P t��Suw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Ru[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Qu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Puw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Ow�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog~��Nw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Mui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black C n�v� � C ���Yu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode���Xg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~��Ww� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Vui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Uu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Tu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849 * &�%�C � * ���`u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��_u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��^uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��]u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���\u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��[uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Zw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog P � 3�2 � P t��guw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��fu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���eu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��duw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��cw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog~��bw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��aui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black C n�v� � C ���mu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode���lg�I �Eike Rathke <erack@redhat.com> - 1:5.3.6.1-26fGF�- Fix CVE-2022-38745 Empty entry in Java class path - Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Fix CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer~��kw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��jui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���iu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��hu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849 * &�%�C � * ���tu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��su�' �Caolán McNamara <caolanm@redhat.com>
